NSW Cyber Security Policy

Guiding the ongoing uplift of cyber security across government​

The NSW Cyber Security Policy provides a framework to guide cyber security uplift across the NSW Government, outlining mandatory requirements, reporting obligations, threat-based cyber risk management principles, roles and responsibilities, and further support resources. Agencies are required to submit annual reporting on how they are meeting the policy.

Achievements

The NSW Cyber Security Policy is reviewed and updated regularly to ensure it is fit for purpose and effective. Reporting against the policy provides an all-of-government understanding of how cyber security is progressing.

Engagement

In 2023, the NSW Cyber Security Policy was updated through extensive consultations with government agencies and incorporated recommendations from the Audit Office of NSW and an independent review.

Department leading the project

Department of Customer Service​