Boundary services

Boundary services are systems and services at network boundaries that manage connectivity between environments of different trust levels, including internet-facing services and edge devices.

These systems are routinely exposed to adversary scanning and exploitation. Weaknesses can provide a direct path into the environment and undermine protections implemented elsewhere.

The guidance within the ASD Essentials is organised into Domains, Principles and Actions.

Domains describe logical groupings of assets within systems and their operating environments.
Principles describe the security outcomes organisations should achieve.
Actions describe prioritised activities for each of those security outcomes.

These resources provide additional guidance to support the implementation of the Essentials for enterprise IT. They provide implementation guidance for achieving the indicators of good practice associated with each Action.

ASD’s Information security manual (ISM) also provides a catalogue of security controls that can be used to achieve the implementation of each Principle and Action.

Asset identification

Foundations for modern defensible architecture

Build secure and more resilient systems using modern defensible architecture. Apply key design foundations to help prevent, detect, and respond to cyber threats.

Managing the risks of legacy IT: Executive guidance

Manage the cyber security risks of legacy information technology through planning, governance and active management of technology.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Secure system lifecycle

Blueprint for Secure Cloud

Use the Blueprint for Secure Cloud to design, configure and deploy secure cloud and hybrid services.

Foundations for modern defensible architecture

Build secure and more resilient systems using modern defensible architecture. Apply key design foundations to help prevent, detect, and respond to cyber threats.

Guidelines for secure AI system development

Secure your AI systems from design to deployment with practical guidance on how to reduce risks, protect data, and build trust.

Safe software deployment: How software manufacturers can ensure reliability for customers

Learn how to release software updates safely by following secure practices to reduce risks, prevent disruptions and build customer trust.

Secure by Design foundations

Learn the six Secure by Design foundations for building, procuring and maintaining secure digital products and services.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Secure configuration management

Blueprint for Secure Cloud

Use the Blueprint for Secure Cloud to design, configure and deploy secure cloud and hybrid services.

Gateway security guidance package: Gateway operations and management

Learn how to securely operate and manage gateways in your organisation.

Hardening Linux workstations and servers

Harden Linux systems by using security controls to reduce vulnerabilities and protect workstations and servers from being compromised.

Hardening Microsoft Windows 11 workstations

Harden Windows 11 workstations by using security settings and controls to reduce vulnerabilities and protect against threats.

Network segmentation and segregation – Anti-patterns

Spot hidden network security gaps and learn how to strengthen segmentation to reduce risk and limit cyber threats.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Secure administration

Restricting administrative privileges

Learn how to effectively restrict administrative privileges to reduce the risk of unauthorised access, system compromise and malicious activity.

Secure administration

Protect administrator accounts and critical systems by using secure administration practices to lower cyber security risks.

Securing PowerShell in the enterprise

Learn how to use PowerShell securely to reduce risk, improve monitoring, and promote responsible use.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Vulnerability management

Mitigation strategies for edge devices: Practitioner guidance

Secure your organisation’s edge devices by using security measures that reduce weaknesses, control access and help detect cyber threats.

Patching applications and operating systems

Reduce security risks by keeping applications and operating systems updated to fix weaknesses and protect against cyber threats.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Trustworthy software

2026 Minimum Elements for a Software Bill of Materials (SBOM)

Improve software supply chain visibility with a Software Bills of Materials (SBOMs) to identify dependencies and better manage cyber security risks.

Choosing secure and verifiable technologies

Learn how to select secure and verifiable technologies that reduce cyber risks and help build reliable systems.

Implementing application control

Use application controls to prevent unauthorised software from running and so reduce the risk of malware infecting your system.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Content filtering

Fundamentals of Cross Domain Solutions

Understand how cross domain solutions help secure data sharing between systems and how to reduce risk.

Malicious email mitigation strategies

Learn how to reduce the risk of malicious emails by using security controls and cyber security practices that protect users, systems and sensitive information.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Gateway security guidance package: Gateway operations and management

Learn how to securely operate and manage gateways in your organisation.

Gateway security guidance package: Gateway security principles

Apply gateway security principles to design, operate and assess gateway services that securely protect information and systems.

Gateway security guidance package: Gateway technology guides

Use gateway technology guidance to securely configure and manage priority gateway services that protect and control network traffic.

Regular and proven backups

Cloud computing security for tenants

Learn how to securely use cloud services by understanding your responsibilities and managing cloud security risks.

Ransomware Playbook

This interactive guide is here to assist you with taking all of the appropriate steps to prepare for, respond to and recover from a ransomware incident.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Least privilege access

Agentic AI harnesses

Learn how an agentic AI harness influences security, governance and operational risk, and apply practical measures to adopt agentic AI securely.

Foundations for modern defensible architecture

Build secure and more resilient systems using modern defensible architecture. Apply key design foundations to help prevent, detect, and respond to cyber threats.

Restricting administrative privileges

Learn how to effectively restrict administrative privileges to reduce the risk of unauthorised access, system compromise and malicious activity.

Secure administration

Protect administrator accounts and critical systems by using secure administration practices to lower cyber security risks.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Identity, credential and access management

Implementing multi-factor authentication

Improve your organisation’s account security by implementing multi-factor authentication to reduce the risk of unauthorised access.

Secure administration

Protect administrator accounts and critical systems by using secure administration practices to lower cyber security risks.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Cyber security awareness training

Detecting socially engineered messages

Learn how to protect yourself from social engineering messages sent via email, SMS, instant messaging and social media.

Privileged User Training

Access short, clear video modules to build practical cyber security awareness and skills for privileged ICT users.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Cyber supply chain security

2026 Minimum Elements for a Software Bill of Materials (SBOM)

Improve software supply chain visibility with a Software Bills of Materials (SBOMs) to identify dependencies and better manage cyber security risks.

Choosing secure and verifiable technologies

Learn how to select secure and verifiable technologies that reduce cyber risks and help build reliable systems.

Cyber supply chain risk management

Learn how to manage cyber supply chain risks by setting clear security rules, checking suppliers and monitoring third-party services.

Safe software deployment: How software manufacturers can ensure reliability for customers

Learn how to release software updates safely by following secure practices to reduce risks, prevent disruptions and build customer trust.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Network segmentation and segregation

Gateway security guidance package: Gateway security principles

Apply gateway security principles to design, operate and assess gateway services that securely protect information and systems.

Implementing network segmentation and segregation

Learn how to improve network security by separating systems, controlling access, and monitoring network activity to reduce the impact of cyber threats.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Mitigations for network defence

Improve network security by using multiple layers of protection to make it harder for attackers to access systems.

Network segmentation and segregation – Overview

Strengthen cyber resilience by learning how network segmentation and segregation reduce risk, help contain threats and protect critical services.

Network segmentation and segregation – Anti-patterns

Spot hidden network security gaps and learn how to strengthen segmentation to reduce risk and limit cyber threats.

Centralised event logging

Best practices for event logging and threat detection

Improve threat detection and incident response by implementing effective event logging and monitoring practices.

Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances

Use network devices that log and monitor activity to support investigation, detection and response to cyber incidents.

Implementing SIEM and SOAR platforms: Practitioner guidance

Learn how to plan, implement and maintain SIEM and SOAR platforms to improve threat detection, incident response and cyber security monitoring.

Priority logs for SIEM ingestion: Practitioner guidance

Learn how to prioritise key event logs to improve threat detection, investigations and incident response.

Windows event logging and forwarding

Improve visibility of system activity by implementing Windows Event Logging and Centralised Forwarding.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Cyber security event detection

Best practices for event logging and threat detection

Improve threat detection and incident response by implementing effective event logging and monitoring practices.

Implementing SIEM and SOAR platforms: Practitioner guidance

Learn how to plan, implement and maintain SIEM and SOAR platforms to improve threat detection, incident response and cyber security monitoring.

Opportunities for AI in cyber defence

Use AI to strengthen cyber security. When used safely and responsibly, AI helps detect threats faster, prioritise risks and reduce manual effort.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Baselined high-risk access activities

Best practices for event logging and threat detection

Improve threat detection and incident response by implementing effective event logging and monitoring practices.

Implementing SIEM and SOAR platforms: Practitioner guidance

Learn how to plan, implement and maintain SIEM and SOAR platforms to improve threat detection, incident response and cyber security monitoring.

Priority logs for SIEM ingestion: Practitioner guidance

Learn how to prioritise key event logs to improve threat detection, investigations and incident response.

Information security manual

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Boundary services

Foundations for modern defensible architecture

Managing the risks of legacy IT: Executive guidance

Information security manual

Blueprint for Secure Cloud

Foundations for modern defensible architecture

Guidelines for secure AI system development

Safe software deployment: How software manufacturers can ensure reliability for customers

Secure by Design foundations

Information security manual

Blueprint for Secure Cloud

Gateway security guidance package: Gateway operations and management

Hardening Linux workstations and servers

Hardening Microsoft Windows 11 workstations

Network segmentation and segregation – Anti-patterns

Information security manual

Restricting administrative privileges

Secure administration

Securing PowerShell in the enterprise

Information security manual

Mitigation strategies for edge devices: Practitioner guidance

Patching applications and operating systems

Information security manual

2026 Minimum Elements for a Software Bill of Materials (SBOM)

Choosing secure and verifiable technologies

Implementing application control

Information security manual

Fundamentals of Cross Domain Solutions

Malicious email mitigation strategies

Information security manual

Gateway security guidance package: Gateway operations and management

Gateway security guidance package: Gateway security principles

Gateway security guidance package: Gateway technology guides

Cloud computing security for tenants

Ransomware Playbook

Information security manual

Agentic AI harnesses

Foundations for modern defensible architecture

Restricting administrative privileges

Secure administration

Information security manual

Implementing multi-factor authentication

Secure administration

Information security manual

Detecting socially engineered messages

Privileged User Training

Information security manual

2026 Minimum Elements for a Software Bill of Materials (SBOM)

Choosing secure and verifiable technologies

Cyber supply chain risk management

Safe software deployment: How software manufacturers can ensure reliability for customers

Information security manual

Gateway security guidance package: Gateway security principles

Implementing network segmentation and segregation

Information security manual

Mitigations for network defence

Network segmentation and segregation – Overview

Network segmentation and segregation – Anti-patterns

Best practices for event logging and threat detection

Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances

Implementing SIEM and SOAR platforms: Practitioner guidance

Priority logs for SIEM ingestion: Practitioner guidance

Windows event logging and forwarding

Information security manual

Best practices for event logging and threat detection

Implementing SIEM and SOAR platforms: Practitioner guidance

Opportunities for AI in cyber defence

Information security manual

Best practices for event logging and threat detection

Implementing SIEM and SOAR platforms: Practitioner guidance

Priority logs for SIEM ingestion: Practitioner guidance

Information security manual

Thanks for your feedback!