Cyber security incident response arrangements in the WA Government Sector are governed by the Western Australian Whole-of-Government Cyber Security Incident Coordination Framework (the framework), which supports Western Australia’s participation in the national Cyber Incident Management Arrangements (CIMA).
The framework applies to:
- WA Public Sector as defined in the Public Sector Management Act 1994 (WA).
- Schedule 1 entities as defined in the Public Sector Management Act 1994 (WA), specifically:
- The WA Police Force
- Gold Corporation and Goldcorp Australia
- Racing and Wagering Western Australia
- Western Australian Land Authority
- Department of the Staff of Parliament
- WA Universities (Curtin University, Edith Cowan University, Murdoch University, The University of Notre Dame, The University of Western Australia)
- All WA Government Trading Enterprises (GTEs), regardless of whether included in the Scope of the GTE Act 2023 and regardless of whether included in the scope of the Security of Critical Infrastructure Act 2018 (Cth)
- Schedule 2 Senior Executive Service (SES) entities as defined in the Public Sector Management Act 1994 (WA).
- Health Service and Health Service Providers (as defined in the Health Services Act 2016 (WA)).
- Local Government and other entities are also expected to comply with the framework.
All Government Sector entities are expected to use the framework in support of their management of cyber security incidents.
Entities must now work to incorporate the framework into their cyber security incident response planning. Under the framework, the responsibilities of entities include:
- developing and exercising cyber security incident management/response plans
- managing/controlling their own response to cyber security incidents
- mandatory reporting of cyber security incidents to the Office of Digital Government and the WA Police Force’s Technology Crime Services.
For more information, and to request a copy of the Western Australian Whole-of-Government Cyber Security Incident Coordination Framework, please contact the Cyber Security Unit via cybersecurity@dpc.wa.gov.au.
To report a cyber incident, please visit this page: Western Australian Government Cyber Security Incident Reporting Portal
