Refresh of Treasury's Security Framework Documentation Suite

⁠⁠⁠In 2018 the Agency commissioned the development of Treasury's Security framework documentation suite. As a result of fundamental and significant changes to the Protective Security Policy Framework (PSPF) and Information Security Manual (ISM) in 2019 these documents need to be updated. In addition, the original documentation suite produced did not include a ICT Security Statement of Applicability (SOA), Target PSPF maturity level, Security performance measures, and Performance monitoring framework.

This engagement is to update the documentation below:

•  Agency Security Framework
•  Agency Security Management Plan
•  Agency Security Policy
•  Data Handling and Classification - SOP
•  Emergency Response - SOP
•  Protective Security Risk Review Addendum
•  Target PSPF maturity level
•  Security performance measures
•  Performance monitoring framework,
•  ICT Enterprise Security and Risk Management Plan
•  ICT Enterprise System Security Plan
•  IT Security Manager - SOP
•  IT Security Officer - SOP
•  System User - SOP
•  System Administrator - SOP
•  Sanitisation, Destruction & Disposal of Information Assets - SOP
•  Security Accreditation Framework
•  Security Awareness Training Guidelines
•  Security Incident Detection and Response Plan
•  ICT Security Statement of Applicability (SOA)