The National Cybersecurity Authority has published version 3.0 of the Essential Cybersecurity Controls with significant updates to cloud and AI governance sections. Key changes include mandatory AI security assessments, enhanced cloud provider evaluation criteria, and new supply chain security requirements. Organizations have 12 months to achieve compliance with the updated controls.