Skip to content
OT principles
ASD Essentials

Essentials for OT

GOV-10 System exposure minimisation

one actionNot in enterprise IT

Protect information about your OT systems, and the systems outside OT that are critical to it, as high-value assets. Stop details of how OT devices are installed from being made public, and require third parties to do the same.

Reviewed 18 October 2026 · Current to ASD's Essentials for OT, published 15 October 2026

The principle

Information about the design, configuration and operation of systems (infrastructure, operating systems, applications and data) is not publicly disclosed or shared externally unless necessary for commercial, legal, regulatory or security purposes, with any disclosure minimised, controlled and logged.

ASD, Information Security Manual (ISM), Principle GOV-10

The action

ASD's actions are quoted as published in Essentials for OT. ASD has not given them IDs, so they are numbered by position.

  1. Action 1 of 1

    Protect OT system information, and the systems outside the OT environment that are critical to OT functionality, as high-value assets, and prevent public disclosure of OT device installation details, requiring third parties to do the same.

    In plain English: Protect OT system information, and outside systems critical to OT, as high-value assets. Stop OT device installation details becoming public, and require third parties to do the same.

    Domains
    Governance and culture

See all 34 principles in Essentials for OT, or read our OT guide.

Sources

The ASD publications this page quotes.

Quoted ASD material © Commonwealth of Australia 2026, licensed under CC BY 4.0.

Everything else on this page is written by Control Stack.