GOV-04 Cyber security resourcing
2 actions under this Govern principle in ASD Essentials for enterprise IT. Each action links to plain-English guidance, audit tips and cross-framework mappings.
ASD principle statement
Suitable and sufficient personnel and resources are identified, acquired and maintained in support of cyber security activities.
Quoted as published. Everything else on this page is written by Control Stack.
- Function
- Govern
- Domains
The two actions
- IT.GOV-04.1Assign Sufficient Skilled Personnel to Run Security Controls and Define Role Responsibilities
Assigns enough skilled staff and resources to introduce, run, watch, maintain and retire security controls, and writes security duties into role descriptions.
Domains:Governance and culture - IT.GOV-04.2Periodically Review Cyber Security Resourcing Against Threat Trends, Incidents and Organisational Change
Checks on a set cycle that security staff, skills, tools and funding still match threat trends, lessons from incidents and organisational changes.
Domains:Governance and culture
Back to the full Essentials for enterprise IT action list, or browse the complete control library.