Advisory Services on Cyber Security, Information Systems, and Biometrics in Relation to Digital ID

The ACCC is inviting sellers to quote for the provision of ad-hoc specialist advice on evidence supplied by entities seeking:

• accreditation under the Digital ID Accreditation Scheme, and/or
• approval to participate in the Australian Government Digital ID System.

The seller(s) will be required to provide advice on cyber security, information systems, and biometrics in relation to plans, procedures, and assessments of entities under the Digital ID Act 2024 and its rules and data standards. This advice will be delivered through a report, detailing the following:

• The opinion of the seller as to whether the evidence is in alignment with industry best practices, relevant standards, and corresponding legislative requirements
• The opinion of the seller as to whether the evidence is consistent with other evidence nominated by the buyer
• General recommendations to better align with industry best practices, relevant standards, or corresponding legislative requirements
• The methodology and rationale behind the advice

The seller(s) will also be required to be available to provide general guidance and answer relevant questions that the buyer may have upon receiving the seller’s advice.

Examples of the kinds of evidence that the seller(s) may be required to provide advice on include: protective security assessments, cyber security risk assessments, penetration testing reports, system security plans, event logging implementation and monitoring plans, disaster recovery and business continuity plans, biometric testing report including presentation attack detection testing.