Control: ism-1717; Revision: 1; Updated: Mar-22; Applicability: ALL; Essential Eight: N/A ​

A ‘security.txt’ file is hosted for all internet-facing organisational domains to assist in the responsible disclosure of security vulnerabilities in an organisation’s products and services.