Project goals

The Department of Primary Industries and Regional Development recognises the growing importance of robust cyber security and ethical governance of artificial intelligence (AI) systems across its operations. With AI increasingly embedded in business processes and decision-making, it is essential to ensure that AI-enabled systems are secure, transparent, accountable, and compliant with both organisational and regulatory requirements.

To strengthen its cyber and AI resilience, DPIRD is implementing an automated Business Systems Assurance Framework. This framework will provide a structured approach to governance, risk management, and compliance across cyber, AI, data, and accessibility domains. It will establish formal policies, procedures, and controls to protect digital assets, AI-enabled systems, and IT infrastructure from cyber threats while ensuring ethical and responsible use of AI technologies.

The Department is seeking Cyber Security Analyst Services to support the development and implementation of a comprehensive IT security framework. Suppliers must hold Advanced registration on the NSW Government ICT Services Scheme (SCM0020) under Category H01 – Strategic risk management.

The engagement is expected to run for 8 months from 1 November 2025. Given the scale of the BSAF project, ongoing support will be required to enhance and refine governance processes, maintain compliance, and embed a culture of security and responsible AI use across the organisation.

Scope

To strengthen its cyber and AI resilience, DPIRD is implementing an automated Business Systems Assurance Framework (BSAF). This framework will provide a structured approach to governance, risk management, and compliance across cyber, AI, data, and accessibility domains. It will establish formal policies, procedures, and controls to protect digital assets, AI-enabled systems, and IT infrastructure from cyber threats while ensuring ethical and responsible use of AI technologies.

Requirements

Mandatory requirements

Scheme membership (SCM0020) *

Information and technology

This procurement category has a mandated scheme.

This category has a mandated scheme, to be awarded this contract you may need to be a member of the ICT Services Scheme SCM0020.

Are you a member of SCM0020?

Response type

Radio button (Yes/No)

Opportunity requirements

1. Tender Documents

Please download all the attached documents and complete and return: -

Part B - Response Form.

Response type

File upload (Multiple)

Please see attached files in the link for more information