Control: ism-1576; Revision: 2; Updated: Mar-22; Applicability: ALL; Essential Eight: N/A ​

If an organisation’s systems or data are accessed or administered by a service provider in an unauthorised manner, the organisation is immediately notified.