Control: ism-1570; Revision: 1; Updated: Jun-22; Applicability: ALL; Essential Eight: N/A ​

Outsourced cloud service providers and their cloud services undergo a security assessment by an IRAP assessor at least every 24 months.