--- title: CISOs made mandatory in Australian government agencies description: CISOs made mandatory in Australian government agencies image: https://www.coriniumintelligence.com/hubfs/Business%20of%20Infosec%20(content%20hub)/bois_PSPFCISOs.jpg --- [Skip to content](https://www.coriniumintelligence.com/content/cisos-made-mandatory-in-australian-government-agencies#main-content) [![Corinium](https://www.coriniumintelligence.com/hs-fs/hubfs/Corinium%20logo%20+%20branding/Corinium-logo_horizontal_reversed.png?width=646&height=196&name=Corinium-logo_horizontal_reversed.png "Corinium")](https://www.coriniumintelligence.com/) - [Home](https://www.coriniumintelligence.com/content) - [About](https://www.coriniumintelligence.com/aboutus) Show submenu for About - [Services](https://www.coriniumintelligence.com/content/services) - [Events](https://www.coriniumintelligence.com/events-calendar) - [Data Insights](https://www.coriniumintelligence.com/content/tag/data) - [InfoSec Insights](https://www.coriniumintelligence.com/content/tag/infosec) - [AssetOps](https://www.coriniumintelligence.com/assetops) - [Subscribe](https://www.coriniumintelligence.com/content/subscribe) - [More](https://www.coriniumintelligence.com/content/cisos-made-mandatory-in-australian-government-agencies#) Show submenu for More - [Articles](https://www.coriniumintelligence.com/content/tag/articles) - [Videos](https://www.coriniumintelligence.com/content/tag/videos) - [Podcast](https://www.coriniumintelligence.com/content/tag/podcast) - [Reports](https://www.coriniumintelligence.com/content/tag/reports) - [Home](https://www.coriniumintelligence.com/content) - [About](https://www.coriniumintelligence.com/aboutus) Show submenu for About - [Services](https://www.coriniumintelligence.com/content/services) - [Events](https://www.coriniumintelligence.com/events-calendar) - [Data Insights](https://www.coriniumintelligence.com/content/tag/data) - [InfoSec Insights](https://www.coriniumintelligence.com/content/tag/infosec) - [AssetOps](https://www.coriniumintelligence.com/assetops) - [Subscribe](https://www.coriniumintelligence.com/content/subscribe) - [More](https://www.coriniumintelligence.com/content/cisos-made-mandatory-in-australian-government-agencies#) Show submenu for More - [Articles](https://www.coriniumintelligence.com/content/tag/articles) - [Videos](https://www.coriniumintelligence.com/content/tag/videos) - [Podcast](https://www.coriniumintelligence.com/content/tag/podcast) - [Reports](https://www.coriniumintelligence.com/content/tag/reports) #### Search: 5 Sep, 2023 [Articles](https://www.coriniumintelligence.com/content/tag/articles) # CISOs made mandatory in Australian government agencies ![](https://www.coriniumintelligence.com/hubfs/Business%20of%20Infosec%20(content%20hub)/bois_PSPFCISOs.jpg) ### *Australian Government's Protective Security Policy Framework amended to mandate cybersecurity  leadership* The Australian Department of Home Affairs' Protective Security Policy Framework has introduced policy changes that will mandate the appointment of a Chief Information Security Officer for government entities. A number of Protectuve Security Policy Framework amendments were approved by the Government Security Committee [in late August](https://www.protectivesecurity.gov.au/news/policy-amendments-multiple-policies). Related to management structures and responsibilities, PSPF policy 2 was amended to, specifically: - require Chief Security Officers (CSOs) hold a minimum Negative Vetting Level 1 security clearance, and - mandate the appointment of a Chief Information Security Officer (CISO) to be responsible for cyber security leadership in the entity. In addition to requiring a minumum Negative Vetting Level 1 clearance, a news release highlighting the change noted that the qualifications and experience of appointed CISOs would vary based on the size and needs of the organisation's cyber security structure.  "The CISO does not have to be appointed at the SES level – the role is best performed by an officer with the appropriate combination of experience, technical skills and other skills such as business acumen, leadership, communications and relationship building," the release noted. The Protective Security Policy Framework, is a security framework and resource for Australian government entitities. It sets out government security policy and supports agencies in implementing those policies. Any non-corporate Commonwealth entities subject to the Public Governance, Performance and Accountability Act 2013 must apply the PSPF.   ## Related Posts [![](https://www.coriniumintelligence.com/hs-fs/hubfs/Malaysia.png?width=352&name=Malaysia.png) ](https://www.coriniumintelligence.com/content/embracing-digital-transformation-amidst-shifting-threats-in-malaysia) ### [Embracing Digital Transformation Amidst Shifting Threats in Malaysia](https://www.coriniumintelligence.com/content/embracing-digital-transformation-amidst-shifting-threats-in-malaysia) Cybersecurity Malaysia CEO discusses the evolving global threat landscape and how companies in... [![](https://www.coriniumintelligence.com/hs-fs/hubfs/Featured%20Images%20(2)-1.jpg?width=352&name=Featured%20Images%20(2)-1.jpg) ](https://www.coriniumintelligence.com/content/how-cisos-can-make-security-matter-to-the-business) ### [How CISOs Can Make Security Matter to the Business](https://www.coriniumintelligence.com/content/how-cisos-can-make-security-matter-to-the-business) For today’s CISOs, security only works when it is embedded into how the business operates. Ahead of... [![](https://www.coriniumintelligence.com/hs-fs/hubfs/Malaysias%20Act%20854.png?width=352&name=Malaysias%20Act%20854.png) ](https://www.coriniumintelligence.com/content/malaysias-act-854-what-it-means-for-cybersecurity-leaders-in-the-country-and-beyond) ### [Malaysia's Act 854: What It Means for Cybersecurity Leaders in the Country and Beyond](https://www.coriniumintelligence.com/content/malaysias-act-854-what-it-means-for-cybersecurity-leaders-in-the-country-and-beyond) The gazetting of Cyber Security Act 2024 on 26 June 2024 by Attorney General's Chambers marks a... [![Corinium-logo_horizontal_reversed](https://www.coriniumintelligence.com/hs-fs/hubfs/Corinium%20logo%20+%20branding/Corinium-logo_horizontal_reversed.png?width=646&height=196&name=Corinium-logo_horizontal_reversed.png "Corinium-logo_horizontal_reversed")](https://www.coriniumintelligence.com) Corinium Global Intelligence 20-22 Wenlock Road, London, N1 7GU 0203 432 2335 #### Our Recent Posts - [About Us](https://www.coriniumintelligence.com/aboutus) - [Subscribe](https://www.coriniumintelligence.com/content/subscribe) - [Privacy Policy](https://www.coriniumintelligence.com/privacy-policy) #### Follow Us [Follow us on LinkedIn ](https://www.linkedin.com/showcase/corinium-data-%26-analytics/?isFollowingPage=true) [Follow us on Facebook ](https://www.facebook.com/coriniumglobal/) [Follow us on Twitter ](https://twitter.com/coriniumglobal) [Follow us on YouTube ](https://www.youtube.com/channel/UCnuGiXMWAH5bhfXOfWkPIuw) [Follow us on Facebook ](https://open.spotify.com/show/4op8cNfQRNrZMP5i79Aze9) [Follow us on Facebook ](https://podcasts.apple.com/gb/podcast/the-business-of-data-podcast/id1528796448) ![](https://px.ads.linkedin.com/collect/?pid=182706&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=306561&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=60306&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=1749329&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=5553244&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=5583316&fmt=gif) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Michael Jenkin", "url" : "https://www.coriniumintelligence.com/content/author/michael-jenkin" }, "dateModified" : "2024-03-21T05:14:17.062Z", "datePublished" : "2023-09-05T00:29:24.000Z", "headline" : "CISOs made mandatory in Australian government agencies", "image" : [ "https://www.coriniumintelligence.com/hubfs/Business%20of%20Infosec%20(content%20hub)/bois_PSPFCISOs.jpg" ], "mainEntityOfPage" : { "@id" : "https://www.coriniumintelligence.com/content/cisos-made-mandatory-in-australian-government-agencies", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.coriniumintelligence.com/hubfs/Corinium-logo_+tagline_horizontal_web-header.png" }, "name" : "Corinium Global Intelligence Limited" } } ```