ASD's Blueprint for Secure Cloud

Database Systems

This page provides a template and guidance to assist organisations in documenting their approach to databases and database servers associated with their system(s) built on ASD's Blueprint for Secure Cloud.

Estimated reading time: 2 minutes

This section does not include specific subsections as <ORGANISATION-NAME>’s overall approach to implementing security controls in relation to in Guidelines for Database Systems for <SYSTEM-NAME> is consistent for all subsections.

As <ORGANISATION-NAME>’s approach to implementing controls related to database systems is consistent across all controls addressed within this section, it does not delve into subsections but rather addresses the controls as a group. This approach is consistent with ASD’s Guidelines for Database Systems.


This section of the SSP is not applicable as <SYSTEM-NAME> does not include any databases, nor does it leverage the use of databases within <ORGANISATION-NAME>. If and when databases are considered for future use within the system boundary of <SYSTEM-NAME>, <ORGANISATION-NAME> will assess and implement appropriate security controls in relation to their use at that time.

However, <SYSTEM-NAME> does use databases as implemented by Microsoft as part of its Microsoft 365 services. <ORGANISATION-NAME> has assessed the implementation of these as documented in Microsoft’s IRAP assessments, and available in Microsoft’s Service Trust Portal and is satisfied with their implementation as they relate to <SYSTEM-NAME>.


Organisational policies and processes implemented

No organisational policies or processes have been implemented in <SYSTEM-NAME> relating to databases.


Technical Controls Implemented

No technical controls are implemented in <SYSTEM-NAME> relating to databases.


Security & Governance

  • None identified


  • None identified


  • None identified

Do you have a suggestion on how the above page could be improved? Get in touch! ASD's Blueprint for Secure Cloud is an open source project, and we would love to get your input. Submit an issue on our GitHub, or send us an email at

Acknowledgement of Country icon

Acknowledgement of Country
We acknowledge the Traditional Owners and Custodians of Country throughout Australia and their continuing connections to land, sea and communities. We pay our respects to them, their cultures and their Elders; past, present and emerging. We also recognise Australia's First Peoples' enduring contribution to Australia's national security.

Authorised by the Australian Government, Canberra