Strong cyber security is essential to protect government information, systems and services. To make sure we are responsible and trustworthy custodians of information and projects we manage, WA Government is driving practices to keep information and systems protected from cyber threats now and in the future as it adopts new technologies.
What this priority could mean for you in the future
As threats continue to evolve, individuals can be assured that their personal data, along with commercially sensitive or confidential information managed by the WA government, is protected by up-to-date security standards and best practices. The 24/7 WASOC monitors threat activity in real time, promptly advises the affected agency if there is danger, and the agency then works with the Cyber Security Unit to contain any threat.
The protections we apply continue to strengthen. Best-practice cyber security standards are defined and articulated for entities to develop their capabilities, and continuous monitoring is enhanced by intelligence sharing partnerships and advanced analytical tools. All of this helps detect unusual activity earlier, keeping WA Government ahead of emerging risks.
Supported by a centrally based, specialised capability uplift unit, agencies are developing better cyber security governance. By connecting to the Vulnerability Scanning Service offered by WASOC, government agencies can proactively detect weaknesses in web applications and network systems. WA Government’s clients and WA’s economy, prosperity and leadership all benefit from a cyber environment that’s increasingly prepared and resilient, keeping information and operational technology secure.
Objectives
4.1 Cyber Security policies, standards and skills and continuous improvement
We are setting the standards for the security of information and systems to help WA Government agencies continuously strengthen their cyber security posture.
Drawing on leading international, Australian, and Western Australian insights, we developed the WA Government Cyber Security Policy to help the WA Government enhance cyber security and protect information, technology, and systems from increasingly complex risks.
The annual analysis of policy implementation within the sector enables our capability uplift team to design targeted programs that support agencies in addressing identified challenges. By developing comprehensive guidance for government entities and leading initiatives to enhance specialist skills and foster a strong information security culture, we contribute to the ongoing and secure delivery of essential WA Government services.
4.2 Continuous monitoring and threat intelligence
We want to lead in threat intelligence, information sharing, and ongoing monitoring to help WA Government systems stay ahead of digital risks.
Continuous real-time monitoring of over 100 government systems connected to the WASOC enables WA Government to promptly identify and address threats. By leading information sharing and collaboration between agencies, the WASOC takes proactive steps to address emerging cyber threats, reducing risk and enhancing the resilience of critical government services in WA. This approach also protects information and supports the reliability of the WA Government’s digital systems.
4.3 Rapid incident response and recovery
We want rapid incident detection and response and coordinated recovery efforts.
When cyber security events occur, incident management and response require fast, effective action. Standards for cyber security operations in WA Government, articulated by the WA Government Cyber Security Policy, ensure that government entities have the capacity to triage and report incidents within their systems. Through simultaneous oversight of more than 100 government systems, the WASOC detects suspicious activity early and has rapid response capabilities. Capability uplift specialists assist government agencies to minimise incident impact and accelerate recovery.
How we are delivering on these objectives
The WA Government is strengthening cyber security capability and posture across the public sector, by enhancing central coordination and support for agencies. This includes expanding specialist cyber security expertise to respond to growing demand and emerging threats.
This approach delivers a coordinated, whole-of-government cyber security posture, helping agencies uplift capability in line with the WA Government Cyber Security Policy. By strengthening central expertise and guidance, the WA Government will ensure more consistent standards, shared best practice and continuous improvement across the sector, protecting government systems, data and digital services relied on by the community.
As the Hazard Management Agency for the Cyber Security Incident hazard in WA, the Cyber Security Unit will work to coordinate prevention, preparedness, response and recovery from high-risk cyber security emergencies.