Mapping Guide

Australian Energy Sector Cybersecurity Framework (AESCSF) Mapping Guide: Industrial Defender

The Australian Energy Sector Cybersecurity Framework (AESCSF) is a set of cybersecurity guidelines designed to enable owners and operators of energy infrastructure in Australia to assess, evaluate, prioritise, and improve their cybersecurity posture. The AESCSF was released in 2018 and is tailored to the unique cybersecurity requirements of the energy sector.

The AESCSF is closely aligned with many other industry standards for OT security, like the NIST Cybersecurity Framework and the Cybersecurity Capability Maturity Model (C2M2) and serves as a broadly relevant example of a top-notch OT security model that is worth looking at regardless of your location or industry.

Download this mapping guide to learn how Industrial Defender helps critical infrastructure teams adopt and enforce each of the AESCSF controls.

List of all hardware systems in the environment including physical location and ownership assignments.
Full software inventory including operating system, firmware, application software, version, etc.
List of all users and accounts on each asset, including local users, administrators, etc.
Patch status of OS and application software.
Known vulnerability exposures in software and their CVSS scores.
Configuration settings to determine whether the device is securely configured for ports, services, passwords, etc.
Network connection interfaces.
Firewall rule network protections in place.
Events with meaningful information for monitoring abnormal activities that may indicate cybersecurity risks.

To learn more about how Industrial Defender can help you comply with the 2022 Qatar Cybersecurity Framework, please fill out the download form.

Download Mapping Guide

Resources