Information and Communication Technologies Security Policy

1. Policy statement

The Department of Education (the Department) implements measures to protect the Department’s computerised information, computer infrastructure and services from theft, unauthorised access or use, disclosure, modification or destruction during the information lifecycle.

2. Policy rules

Employees must:

• only use the Department’s information and communication technology (ICT)  resources to which they have been granted access privileges;
• prevent unauthorised disclosure of data;
• prevent unauthorised access to information on an inactive workstation;
• report any suspicion of, or known security threats or breaches, to their line manager or the Customer Service Centre; and
• only use the Department’s ICT resources;
  • for work/business and educational purposes; or
  • for personal use provided it is not for commercial gain or in any way counterproductive to the business of the Department.

In addition, principals must maintain infrastructure security in schools.

3. Responsibility for Implementation and Compliance

Principals and line managers are responsible for implementation of the policy. 

The Chief Information Officer is responsible for compliance monitoring.

4. Scope

This policy applies to all Department employees.

5. Supporting Procedures

Information and Communication Technologies Security Procedures

6. Definitions

7. Related documents

8. Contact information

Policy manager:            

Director, ICT Infrastructure and Telecommunications

Policy contact officer:    

ICT Security Administrator

T: (08) 9264 5114                               

Other contact:          

Customer Service Centre (CSC)

T: (08) 9264 5555

7.30am – 5.00pm Monday to Friday (excluding public holidays)

9. History of changes