Overview
The DESE Information Security Management Systems (ISMS) Scheme is an Australian Government information security framework developed by the former Department of Education, Skills and Employment (DESE) to help service providers protect sensitive information used in the delivery of employment, training, and related government services. The scheme combines the requirements of ISO/IEC 27001, additional controls from the Australian Government Information Security Manual (ISM), and the Right Fit For Risk (RFFR) framework to establish a comprehensive, risk-based approach to information security management. Organizations participating in the scheme are required to implement and maintain an Information Security Management System that safeguards the confidentiality, integrity, and availability of information through appropriate governance, security controls, risk management practices, and ongoing monitoring. The scheme helps service providers meet contractual obligations while demonstrating their commitment to protecting sensitive government and customer information.