Control: ism-1793; Revision: 0; Updated: Sep-22; Applicability: ALL; Essential Eight: N/A ​

Managed service providers and their managed services undergo a security assessment by an IRAP assessor at least every 24 months.