97771—Cyber Authorisation Process Reform solution

Defence requires an enabling technology solution that will govern lifecycle management of cyber secure Defence Technology Systems from identification through retirement, independent of delivery pathway or organisational structure. By establishing traceability between Technology Systems and the evidence associated to lifecycle events, it will support proportionate cybersecurity assurance, enterprise cyber risk visibility and accountable decisions. The key needs and requirements for the technology solution have been identified as follows: a. Enables lifecycle management of cyber secure Defence Technology Systems from identification through retirement, independent of delivery pathway or organisational structure. b. Enables a canonical Technology System record linking identity, ownership, scope, mission context, architecture, dependencies, composition, security controls, evidence, cyber risk, findings, exceptions, decisions and lifecycle history. c. Combines lifecycle workflows, Governance, Risk & Compliance (GRC), authoritative data and traceable evidence to support proportionate cybersecurity assurance, enterprise cyber risk visibility and accountable decisions.