The Attorney-General’s Department has advised that reforms to the Protective Security Policy Framework (PSPF) are to come into effect on 1 October 2018 instead of 1 July.
In a post on its PSPF website, the Department said the Framework had been developed to assist Australian Government entities protect their people, information and assets, at home and overseas.
“The PSPF provides policy, guidance and better practice advice for governance, personnel, physical and information security,” the Department said.
“The 36 mandatory requirements assist Agency Heads to identify their responsibilities to manage security risks to their people, information and assets.”
“While few entities are fully compliant with all of the PSPF, the Government’s security posture is still broadly sound.
“On average, non-corporate Commonwealth entities fully comply with a significant proportion of requirements.”
It said the new 1 October commencement for the reformed PSPF would provide entities with more time to consider the implications of the reforms for their security risk environment and assess any necessary changes to their current practice and procedure.
“The reforms will introduce a new principles-based policy architecture, separating mandatory requirements and guidance material,” the Department said.
“This is intended to better support the achievement of risk-based security outcomes.”
It said the new policy framework would not fundamentally change entities’ responsibilities to protect their people, information and assets and it would be supporting implementation in affected entities with communication and training materials.
“The Department will hold a number of information sessions for Australian Government security personnel in September and October 2018.
“When dates and venues are confirmed, details will be available on the Protective Security Policy GovDex ‘Events’ page.
It said draft policy requirements and supporting guidance were available on the same website.
