Question

Compare and contrast cyber security policy of Victorian and NSW governments

Answer 1

• Cyber security is an important component of the NSW Digital Government Strategy. The Government of New South Wales, known most often as the NSW Government, is the Australian state democratic administrative authority of New South Wales. Cyber security covers all measures used to protect systems–andinformation processed, stored or communicated on thesesystems–from compromise of confidentiality, integrity and availability.
• Cyber security is becoming more important as cyber risks continue to evolve. We have also had rapid technological change resulting in increased cyber connectivity and more dependency on cyber infrastructure.
• cyber security approaches have focussed on prevention controls and compliance standards. These have an important place, but it is evident that an expanded focus is needed on cyber security incident monitoring, detection, response, and recovery capabilities. This expanded concept of cyber resilience is the ability to prepare for, respond to and recover from cyber incidents and disruption.
• Cyber security services and capabilities will be deployed widely and offered to the Victorian public service.
• Key improvements include strengthening cyber security governance, identifying an Agency’s most valuable or operationally vital systems or information, strengthening cyber security controls, developing a cyber security cultureacross all staff, working across government to share security and threat intelligence and a whole of government approach to cyber incident response.
• The policy outlines the mandatory requirements to whichall NSW government departments and PublicService agencies must adhere, to ensure cyber security risks totheir information and systems are appropriately managed. This policy is designed to be read by Agency Headsand all Executives, Chief Information Officers, Chief Information Security Officers and Audit and Risk teams
• Cyber Security NSW can assist agencies implementingthe policy, with an FAQ document and guidelines on several cyber security topics.