The NSW Cyber Security Policy outlines mandatory requirements that all NSW Government agencies must follow to ensure the effective management of cyber security risks to government information and systems. It mandates annual reporting by agencies and includes policy directives related to incident management, risk assessment, and compliance.
The NSW Cyber Security Policy is a regulatory framework established by Cyber Security NSW to standardize cyber security practices across all NSW Government agencies. It includes mandatory reporting, requiring agencies to provide assurance assessments, details on high or extreme residual risks, and an attestation on cyber security measures. Cyber Security NSW also issues related circulars and directives on various topics, such as accessing systems while overseas, managing cyber security incident information, and restricting certain applications due to foreign risk concerns. The policy is enforced through mandatory annual submissions and includes additional guidance documents and tools to aid compliance.
