Compliance made simple with Macrosine

What's changing and how will it affect my organisation?

The Australian Digital Health Agency has identified a set of security requirements for systems connecting to the My Health Record system comprising of controls related to application hardening (among others), with controls aligned to the Australian Cyber Security Centre’s (ACSC) Essential Eight Maturity Model. Controls SEC-0040 and SEC-0260, both of which address the handling of Microsoft Office macros, are mandatory conformance requirements for the updated My Health Record System Conformance Assessment Scheme (CAS) for connecting systems. If you’re not ready for these changes then you may no longer meet the requirements to access or integrate with the My Health Record System.

Why are SEC-0040 and SEC-0260 being mandated?

Threat actors have long since used legitimate applications to infiltrate and laterally move across compromised environments. The reasons for this are clear; the likelihood of being detected is much lower when common applications are leveraged instead of malicious tools that might trigger prevention or detection controls.

With Macrosine you can retain all of the productivity of Microsoft Office macros, achieve the highest possible security maturity level, ensure the lowest business impact, and meet the mandatory requirements set forth by SEC-0040 and SEC-0260.

• Macrosine's world-class security scanning capability allows you to sandbox, detonate, and validate Microsoft Office macros.
• Upload your Microsoft Office macro-enabled file to the Macrosine server to scan and digitally sign if validated as safe.
• Configure your organisation to only allow the execution of signed macros and scripts, delivering the highest level of assurance.
• Install on your on-premises infrastructure or in your own subscription in Azure.

Download the Macrosine brochure (PDF)