Skip to content
OT principles
ASD Essentials

Essentials for OT

GOV-04 Cyber security resourcing

one actionAlso in ASD Essentials for enterprise IT

Make sure OT cyber security has enough people and resources. Staff need the right skills to run, monitor and maintain controls across OT over their whole life. Write cyber security duties into role descriptions.

Reviewed 18 October 2026 · Current to ASD's Essentials for OT, published 15 October 2026

The principle

Suitable and sufficient personnel and resources are identified, acquired and maintained in support of cyber security activities.

ASD, Information Security Manual (ISM), Principle GOV-04

The action

ASD's actions are quoted as published in Essentials for OT. ASD has not given them IDs, so they are numbered by position.

  1. Action 1 of 1

    Assign sufficient cyber security personnel and resources with the required skills to operate, monitor, maintain and manage the lifecycle of controls across OT, and define cyber security responsibilities within role descriptions.

    In plain English: Assign enough skilled cyber security staff and resources to run, monitor, maintain and manage the lifecycle of controls across OT. Write cyber security duties into role descriptions.

    Domains
    Governance and culture

See all 34 principles in Essentials for OT, or read our OT guide.

Sources

The ASD publications this page quotes.

Quoted ASD material © Commonwealth of Australia 2026, licensed under CC BY 4.0.

Everything else on this page is written by Control Stack.