Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >AESCSF
  3. >ARCHITECTURE
  4. >Establish And Maintain Cybersecurity Architecture Strategy And Program
  5. >AESCSF-ARCHITECTURE-1f
AESCSF-ARCHITECTURE-1fActive

The cybersecurity architecture establishes and maintains cybersecurity requirements for the organisation’s assets

Statement

The cybersecurity architecture establishes and maintains cybersecurity requirements for the organisation’s assets

Context and Guidance: Select and document requirements for the appropriate level of confidentiality, integrity, and availability of IT, OT, and information assets. A common expression of these requirements are organisational policies associated with the selection and implement of controls for the organisation’s assets.

Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ARCHITECTURE-1c, ARCHITECTURE-1f, ARCHITECTURE-1j, ARCHITECTURE-1k.

Location

Domain
ARCHITECTURE
Objective
Establish and Maintain Cybersecurity Architecture Strategy and Program

Practice Details

Identifier
AESCSF-ARCHITECTURE-1f
Type
Practice
Domain
ARCHITECTURE
Objective
Establish and Maintain Cybersecurity Architecture Strategy and Program

Maturity Level

MIL-1MIL-2MIL-3

Security Profile

SP-1SP-2SP-3
ISM
ISM-1739relatedvia aescsf-reference
C2M2
C2M2-ARCHITECTURE-1Fequivalentvia derived-shared-practice-structure
View in graphReport an issue
← Back to Establish and Maintain Cybersecurity Architecture Strategy and Program
Establish and Maintain Cybersecurity Architecture Strategy and Program11 controls
AESCSF-ARCHITECTURE-1aThe organisation has a strategy for cybersecurity architecture, which may be developed and managed in an ad hoc mannerAESCSF-ARCHITECTURE-1bA strategy for cybersecurity architecture is established and maintained in alignment with the organisation’s cybersec...AESCSF-ARCHITECTURE-1cA documented cybersecurity architecture is established and maintained that includes IT and OT systems and networks an...AESCSF-ARCHITECTURE-1dGovernance for cybersecurity architecture (such as an architecture review process) is established and maintained that...AESCSF-ARCHITECTURE-1eSenior management sponsorship for the cybersecurity architecture program is visible and activeAESCSF-ARCHITECTURE-1fThe cybersecurity architecture establishes and maintains cybersecurity requirements for the organisation’s assetsAESCSF-ARCHITECTURE-1gCybersecurity controls are selected and implemented to meet cybersecurity requirementsAESCSF-ARCHITECTURE-1hThe cybersecurity architecture strategy and program are aligned with the organisation’s enterprise architecture strat...AESCSF-ARCHITECTURE-1iConformance of the organisation’s systems and networks to the cybersecurity architecture is evaluated periodically an...AESCSF-ARCHITECTURE-1jThe cybersecurity architecture is guided by the organisation’s risk analysis information (RISK-3d) and threat profile...AESCSF-ARCHITECTURE-1kThe cybersecurity architecture addresses predefined states of operation (SITUATION-3g)