Situation The NSW Digital Information Security Policy requires all agencies to build, operate and continually improve an Information Security Management System (ISMS) in line with the ISO 27001 standard. Agencies whose risk profile warrants it, or who provide shared services, need to attain formal certification to the standard. Developing an ISMS from scratch can be […]
