Number: 2025/13
Issue Date: 01/07/2025
Review Date: 30/06/2029
Policy
The strengthening of cyber security in WA Government is a key priority of the Digital Strategy for the Western Australian Government 2021-2025 / 2026-2030.
This Circular applies to all entities included in the scope of the 2024 Western Australian Government Cyber Security Policy (the Policy).
For the avoidance of doubt, this Circular is intended to apply to statutory office holders other than to the extent that it is inconsistent with the performance of their independent functions.
- Implementation of the Policy.
The Policy sets standards and measures to manage cyber security risks.
- Entities must:
- Implement the Policy;
- Connect to the Office of Digital Government (DGov) Whole of Government Security Operations Centre; and
- Report annually on the implementation of the Policy to DGov.
2. Compliance with Western Australian Whole-of-Government Cyber Security Incident Coordination Framework (Framework).
- The Framework sets coordination measures for cyber incident response.
- Entities must:
- incorporate the Framework into their cyber incident response planning.
- report suspected or confirmed cyber security incidents within the timeframes required by the Policy to the WA Government Cyber Security Incident Reporting Portal https://irp.dpc.wa.gov.au.
3. Provision of Office of the Auditor General’s (OAG) audit findings to DGov.
- The OAG audits how entities manage confidentiality and integrity of information systems.
- Entities must provide a copy of their management letters and their response to OAG findings to DGov within seven days of responding to the OAG.
Background
Government is dependent on reliable and secure digital systems to provide public services and protect valuable government information.
Compliance with the Policy and Framework protects the integrity of WA Government information systems, reduces cyber security risk and improves the cyber security resilience of WA Government entities.
Roger Cook MLA
PREMIER
Other relevant Circulars: N/A
Circular/s replaced by this Circular: 2022/03
Print this page
