NSW Cyber Security Policy

The NSW Cyber Security Policy is a regulatory framework established by Cyber Security NSW to standardize cyber security practices across all NSW Government agencies. It includes mandatory reporting, requiring agencies to provide assurance assessments, details on high or extreme residual risks, and an attestation on cyber security measures. Cyber Security NSW also issues related circulars and directives on various topics, such as accessing systems while overseas, managing cyber security incident information, and restricting certain applications due to foreign risk concerns. The policy is enforced through mandatory annual submissions and includes additional guidance documents and tools to aid compliance.