The policy requires all employees to manage risks. It provides guidance on risk management and business continuity planning by integrating risk identification, assessment and reporting into everyday operations.

Information and communication technologies are provided by the Department to enable employees and authorised third parties to satisfactorily perform their duties. It is recognised that the associated information, physical equipment, infrastructure and software is at risk of accidental or intentional loss, unauthorised manipulation or unauthorised disclosure. This policy authorises security controls to address those risks.

The Department of Education manages a breach of Standards claims in accordance with the Public Sector Management (Breaches of Public Sector Standards) Regulations 2005 and in compliance with the requirements of the Commissioner's Instructions: Employment Standard and Filling a Public Sector Vacancy.