The department requires an independent audit of its protective security posture to:

1. Establish DEWR's and DE's current level of protective security compliance in terms of the PSPF annual self-assessment.

2. Provide assurance the department has in place appropriate mechanisms to monitor the effective implementation of, and compliance with the policy detailed within the six PSPF protective security domains.

3. Identify gaps and detail the actions and activities the department should undertake to achieve them.

4. Assess DEWR's level of compliance with the ACSC Essential Eight in line with the guidance provided in ACSC's Essential Eight Audit Process Guide and to inform the department's response to the annual ASD survey in July.

5. Identify gaps and detail the actions and activities the department should undertake to achieve compliance with the cyber security requirement as per the Essential eight and ISM.