The Department of Home Affairs is seeking resources with experience and capability in cyber policy and process to support its work in delivering against the Commonwealth Cyber Security Strategy and Home Affairs Corporate Plan. The Department is seeking assistance in delivering the Protective Security Policy Framework (PSPF) Assurance Capability and requires the services of a seller with experience in delivering Strategy and Policy and Governance services to the Australian Government.

The Vendor will work with the Commonwealth Security Policy Branch to develop an assurance capability that will underpin the annual PSPF self-assessment reporting and engagement programs to deliver protective security uplift across the Commonwealth.

The Vendor will facilitate the development of PSPF Assurance documentation, with deliverables and agreed timeframes to be defined and managed in compliance with the governance and capability lifecycle management requirements of Home Affairs.

The Vendor must provide the products and services in a way that complies with and ensures the Buyer can comply with the PSPF including:

• Policy 6 – security governance for contracted goods and service providers
• Policy 10 – safeguarding data from cyber threats
• Policy 11 – robust ICT systems
• Policy 12 – eligibility and suitability of personnel
• Policy 14 - separating personnel
• Policy 15 – physical security for entity resources