ATO Digital Service Provider (DSP) Operational Security Framework
What is ATO Digital Service Provider (DSP) Operational Security Framework?
The Australian Taxation Office's security framework for software developers whose products send tax, accounting, payroll, business registry or superannuation data to the ATO: audit logging, multi-factor authentication and session limits, onshore hosting, key management, encryption at rest and TLS 1.3 in transit, customer entity validation, personnel security, security monitoring, supply chain and add-on marketplace controls, independent certification or self-assessment by risk category, annual reviews, change notices and reporting data breaches to the ATO within one business day, as a condition of access to ATO APIs and digital services. It comprises 26 controls organised across 3 domains, and applies in Australia.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where ATO Digital Service Provider (DSP) Operational Security Framework overlaps with the standards you already hold
What ATO Digital Service Provider (DSP) Operational Security Framework means in your sector
What ATO Digital Service Provider (DSP) Operational Security Framework means for your job
Questions people ask about ATO Digital Service Provider (DSP) Operational Security Framework
What is ATO Digital Service Provider (DSP) Operational Security Framework?
How many controls does ATO Digital Service Provider (DSP) Operational Security Framework have?
Where does ATO Digital Service Provider (DSP) Operational Security Framework apply?
Which version of ATO Digital Service Provider (DSP) Operational Security Framework is covered here?
Query ATO Digital Service Provider (DSP) Operational Security Framework programmatically
ATO Digital Service Provider (DSP) Operational Security Framework, its 26 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ATO Digital Service Provider (DSP) Operational Security Framework API reference and MCP config →How ready are you for ATO Digital Service Provider (DSP) Operational Security Framework?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.