NSW Cyber Security Policy 2023-24

This policy sets clear standards and guidelines for agencies to manage evolving cyber risks effectively. The NSW Cyber Security Policy incorporates recommendations from the Audit Office of NSW and an independent review commissioned by Cyber Security NSW, following extensive consultation with government agencies to ensure its effectiveness and relevance.​

The NSW Cyber Security Policy mandates that all government agencies manage cyber security risks and report annually to Cyber Security NSW by 31 October, either through their portfolio CISO or directly.

Engagement

In 2023, the NSW Cyber Security Policy was updated through extensive consultations with government agencies and incorporated recommendations from the Audit Office of NSW and an independent review by Cyber Security NSW to ensure its relevance and effectiveness.

Department leading the project

Cyber Security NSW