Search

Department of Education, Skills and Employment - Gifts and Benefits Register: 1 July - 30 September 2020

This Guideline assists Providers who deliver services under any deed that the Department of Education, Skills and Employment (the Department) administers that may refer to this guideline  to comply with the Privacy Act 1988 (Privacy Act), inc

Highlights the differences between an industry standard ISO 27001 and the RFFR requirements

Outlines the government resources available to assist, understand and address cyber security risks

Details the need to identify an internal sponsor to oversee the implementation of the customised ISO 27001 in all areas of the organisation

Assists Providers identify their third parties, who is responsible for them and determine what impact the security of these entities have on a Provider’s environment.

Explains the stages in the life cycle of third party vendors and highlights what providers should think about when contracting with third parties.

Provides a high-level overview of the concept of risk assessment and treatment in an ISO 27001 context

Helps providers avoid missteps the department has seen to date to make accreditation a smooth process

Differentiates between the essential activities of performing an ISO 27001 gap analysis and a security risk assessment, when implementing an Information Security Risk Management System

This report outlines key findings from a successful trial aimed at improving the soft skills of job seekers through the use of behavioural economics.