📍  Adelaide, 10 Sept: Prove your controls once. Report against every obligation. Register 
MarketplaceCybersecurityDESE ISMS Scheme
CybersecurityFramework

DESE ISMS Scheme

DESE Information Security Management Systems (ISMS) Scheme

The DESE ISMS Scheme is an information security certification framework that combines ISO/IEC 27001, the Australian Government Information Security Manual (ISM), and the Right Fit For Risk (RFFR) framework to help service providers manage cyber risks and protect sensitive information.

Book your strategy callView source ↗

Overview

The DESE Information Security Management Systems (ISMS) Scheme is an Australian Government information security framework developed by the former Department of Education, Skills and Employment (DESE) to help service providers protect sensitive information used in the delivery of employment, training, and related government services. The scheme combines the requirements of ISO/IEC 27001, additional controls from the Australian Government Information Security Manual (ISM), and the Right Fit For Risk (RFFR) framework to establish a comprehensive, risk-based approach to information security management. Organizations participating in the scheme are required to implement and maintain an Information Security Management System that safeguards the confidentiality, integrity, and availability of information through appropriate governance, security controls, risk management practices, and ongoing monitoring. The scheme helps service providers meet contractual obligations while demonstrating their commitment to protecting sensitive government and customer information.

Related in Cybersecurity

CybersecurityStandard

OTCC-1:2022 — Operational Technology Cybersecurity Controls

The Operational Technology Cybersecurity Controls (OTCC-1:2022), developed by Saudi Arabia’s National Cybersecurity Authority (NCA), establish minimum cybersecurity requirements for Operational Technology (OT) and Industrial Control Systems (ICS) environments. The framework aims to protect critical infrastructure from cyber threats and enhance operational resilience, safety, and security. OTCC consists of 4 domains, 23 subdomains, 47 controls, and 122 sub-controls, with requirements categorized across three control levels (L1, L2, and L3) based on facility criticality and risk.

National Cybersecurity Authority (NCA) • Saudi Arabia • v2022

View details
CybersecurityControl setGuideline

ITSG-33 — IT Security Risk Management: A Lifecycle Approach (ITSG-33)

ITSG-33 is a guideline developed by the Canadian Centre for Cyber Security to help government departments manage IT security risks effectively. It outlines activities at both departmental and project levels, providing a structured process for integrating security considerations into IT environments and maintaining authorization to operate.

Canadian Centre for Cyber Security • Canada

View details
CybersecurityStandard

ESMA Minimum Standard IT Security Controls

The ESMA Minimum Standard IT Security Controls is a cybersecurity and compliance framework that defines the minimum security requirements service providers must implement to protect ESMA systems, applications, data, and information services.

European Securities and Markets Authority (ESMA) • EU

View details
CybersecurityStandardFramework

DISP 2020 — Defence Industry Security Program (DISP)– Suitability Assessment (2020)

The Defence Industry Security Program (DISP) is an Australian Defence membership program that helps organizations implement and demonstrate appropriate security controls for participating in Defence projects and managing Defence-related information and assets.

Australian Department of Defence • Australia • v2020

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call