Information security

The Government-wide adoption of common policy, standards, guidelines and processes for information security; including data classification and management, will enable the Victorian Government to reduce the risk of inappropriate information release or access.

Policy

• SEC STD 01 Information Security Management Framework April 2009 version 2.0 (187 kb PDF)
• SEC STD 02 Information Security Data Classification and Management April 2009 version 1.0 (198 kb PDF)
• SEC STD 03 Information Security Penetration Testing November 2009 version 1.0 (205 kb PDF)
• SEC STD 04 Information Security Use of Portable Storage Devices November 2009 version 1.0 (320 kb PDF)

• Security Policy information security templates October 2009 version 1.0 (86 kb Word)
• System operational description information security management templates October 2009 version 1.0 (169 kb Word)
• Risk assessment report information security templates October 2009 version 1.0 (290 kb Word)
• Statement of applicability information security management templates October 2009 version 1.0 (143 kb Excel)