Latest publications 11 Sep 2026 Agentic AI harnesses Learn how an agentic AI harness influences security, governance and operational risk, and apply practical measures to adopt agentic AI securely. 04 Sep 2026 Gateway security guidance package: Executive guidance The purpose of this guidance is to inform decision-makers at the executive level of their responsibilities, the appropriate considerations needed to make informed risk-based decisions, and to meet policy obligations when leading the design or consumption of their organisation’s gateway services. 04 Sep 2026 Gateway security guidance package: Gateway operations and management This guidance is one part of a package of documents that forms the Australian Signals Directorate (ASD)’s Gateway security guidance package written for audiences responsible for the operation and management of gateways. All publications Title AudienceIndividuals & familiesSmall & medium businessesOrganisations & Critical InfrastructureGovernment Sort by Sort byDate updated (new to old)Date updated (old to new)Title (A-Z)Title (Z-A) Items per page 61218243036424854606672788490200 12 Dec 2024 Vulnerability disclosure programs explained A vulnerability disclosure program (VDP) is a collection of processes and procedures designed to identify, verify, resolve and report on vulnerabilities disclosed by people who may be internal or external to organisations. The importance of developing, implementing and maintaining a well thought-out VDP cannot be underestimated. It is an integral part of professional organisations’ business operations. 12 Dec 2024 Cyber security incident response planning: Executive guidance The Australian Signals Directorate (ASD) is responsible for monitoring and responding to cyber threats targeting Australian interests. Reporting cyber security incidents to ASD ensures that timely assistance can be provided, if required. This may be in the form of investigations or remediation advice. 12 Dec 2024 Cyber security incident response planning: Practitioner guidance ASD defines a cyber security incident as an unwanted or unexpected cyber security event, or a series of such events, that has either compromised business operations or has a significant probability of compromising business operations. 05 Dec 2024 Choosing secure and verifiable technologies: Executive guidance This guide supports senior leaders to enable their organisations to understand their threat environment and make better-informed assessments and decisions to procure secure technologies. 05 Dec 2024 Choosing secure and verifiable technologies The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and international partners have provided recommendations in this guide as a roadmap for choosing secure and verifiable technologies. 28 Oct 2024 Essential Eight maturity model FAQ This publication provides answers to frequency asked questions on how to implement the Essential Eight. Pagination Previous page ‹‹ Page 11 Next page ›› Alerts and Advisories Advice, guidance and publications Reports and statistics News Programs Glossary