Queensland Information Security Policy (IS18:2018)

This download includes the QLD IS18 annual return requirements only so there are no mapped questions. Use this download if you just want the provisions and you want to create your own question set.

The QLD IS18 annual return is an annual assessment of cyber security required to be undertaken by QLD government entities. The requirements are closely aligned with ISO/IEC 27001 and require QLD government entities to have an effective Information Security Management System (ISMS). For the ASD Essential 8 reporting requirements, please refer to our separate ASD Essential 8 assessment.

The QLD IS18 annual return includes 169 requirements across 10 domains (principles) as well as 17 ISMS and 3 Policy requirements. The 10 domains are:

1. Policy, Planning and Governance
2. Asset Management
3. Human Resources Management
4. Physical and Environmental Management
5. Communications and Operations Management
6. Access Management
7. System Acquisition, Development and Maintenance
8. Incident Management
9. Business Continuity Management
10. Compliance Management