[1] Australian government departments have been given up to September to plan how they will comply with the 36 security controls stipulated by the Digital Transformation Office (DTO).
[2] The compliance regulation is stipulated in the Protective Security Policy Framework (PSPF) and Information Security Manual (ISM).
[3] The DTO’s Digital Service Standard (DSS) outlines 16 areas of compliance and the scope includes all new government services and existing high volume services.