CybersecurityFramework

PSPF 2026

Protective Security Policy Framework Release 2026

Protective Security Policy Framework (PSPF) Release 2026 is the Australian Government's updated protective security framework that sets mandatory requirements across six security domains to help government entities protect their people, information, assets, and resources through effective risk management and security practices.

Overview

The Protective Security Policy Framework (PSPF) Release 2026 is the Australian Government's latest protective security policy framework, published by the Department of Home Affairs and effective from 1 July 2026. The framework establishes mandatory protective security requirements across six security domains: Governance, Risk Management, Information Security, Technology Security, Personnel Security, and Physical Security. It provides a comprehensive, risk-based approach to safeguarding government people, information, assets, and resources both within Australia and internationally. PSPF Release 2026 supports government entities in identifying, assessing, and mitigating security risks and vulnerabilities while maintaining responsible and effective protective security practices. The annual release reflects updates to security requirements, standards, and guidance in response to the evolving threat environment and emerging security challenges.

Related in Cybersecurity

CybersecurityControl setGuideline

ITSG-33 β€” IT Security Risk Management: A Lifecycle Approach (ITSG-33)

ITSG-33 is a guideline developed by the Canadian Centre for Cyber Security to help government departments manage IT security risks effectively. It outlines activities at both departmental and project levels, providing a structured process for integrating security considerations into IT environments and maintaining authorization to operate.

Canadian Centre for Cyber Security β€’ Canada

View details
CybersecurityStandard

ESMA Minimum Standard IT Security Controls

The ESMA Minimum Standard IT Security Controls is a cybersecurity and compliance framework that defines the minimum security requirements service providers must implement to protect ESMA systems, applications, data, and information services.

European Securities and Markets Authority (ESMA) β€’ EU

View details
CybersecurityStandardFramework

DISP 2020 β€” Defence Industry Security Program (DISP)– Suitability Assessment (2020)

The Defence Industry Security Program (DISP) is an Australian Defence membership program that helps organizations implement and demonstrate appropriate security controls for participating in Defence projects and managing Defence-related information and assets.

Australian Department of Defence β€’ Australia β€’ v2020

View details
CybersecurityStandardFramework

DISP 2022 β€” Defence Industry Security Program – Suitability Requirements (2022)

The Defence Industry Security Program (DISP) is an Australian Defence security assurance program that helps organizations meet security requirements for Defence contracts and projects by implementing appropriate governance, personnel, physical, and information security controls.

Australian Government β€’ Australia β€’ v2022

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks β€” automatically.

Book your strategy call