E8 Review and Security Assessment Report

The ATO requires a suitably qualified assessors to conduct the below activities for two accredited services; myID and Relationship Authorisation Manager (RAM) including components detailed in the ATO’s Digital Identity Data Environment:

• An Essential strategies review and report
• Protective security assessment

 This assessment is to be conducted in accordance with the, Digital Identity (Accreditation) Rules 2024 and relevant Protective Security requirements as outlined in the Digital ID (Accreditation) Rules 2024.

This statement of requirements should be read in conjunction with the Accreditation Rules which can be accessed here: Digital ID (Accreditation) Rules 2024 - Federal Register of Legislation