Security

News

• Security in the Government Sector (SIGS): 26-Jun-2002
  This manual is issued by the Interdepartmental Committee on Security in accordance with its terms of reference. It replaces the manual “Security in Government Departments” issued in 1994, and incorporates the revised security classification system approved by Cabinet on 18 December 2000. 
• Minimum Standards for Internet Security in the New Zealand Government is now incorporated in SIGS, Chapter 8, Annex A.
  
  

Government Security

• Securing our Nation's Security - How New Zealand manages its security and intelligence agencies

Agencies

• The New Zealand Security Intelligence Service (NZSIS)
• The Government Communications Security Bureau (GCSB)
• The Centre for Critical Infrastructure Protection (CCIP)
• The External Assessments Bureau (EAB)
• The Directorate of Defence Intelligence and Security (DDIS)

Questions

This website is being developed to act as a focal point for the publication of Government information about security standards, procedures and resources.  We're interested in your constructive comments.  If you have a specific question on the security of Government information, please send it to security@dpmc.govt.nz 

Answers to Frequently Asked Questions

Resources

Training Resources

NOTE: To use the following resources, right-click on the link and "Save Target As" to your local PC

Revised Classification System

• Wallchart: PDF 1,693Kb, Publisher 2000 67Kb 
• Slides and notes: Powerpoint 2000 414 Kb 

Central Government Information Resources

• Security in the Government Sector (SIGS), DPMC
• Minimum Standards for Internet Security in the New Zealand Government is now incorporated in SIGS, Chapter 8, Annex A, MS Word, 238Kb
• New Zealand Security of Information Technology Publications (NZSITs), GCSB
• Public Service Code of Conduct, SSC
• National Information Infrastructure Protection Strategy, E-government Unit, SSC
• Secure Electronic Environment (S.E.E.), E-government Unit, SSC

Third party resources

Third party disclaimer

• Standards New Zealand - SNZ publishes various security standards available for online purchase:
  • 17799:2001(AS/NZS ISO/IEC)
    Information technology - Code of practice for information security management
  • NZS 6656:1995: Code of Practice for The Implementation and Operation of a Trustworthy Computer System
  • HB 231:2000: Information Security risk management guidelines
  • NZMP 6653:2000: Information Systems Security Standards Handbook
  • AS/NZS 4360:1999: Risk Management
• Australian Computer Emergency Response Team - AusCERT provides a single, trusted point of contact in Australia for the Internet community to deal with computer security incidents and their prevention.
• CERT® Coordination Center (CERT/CC)  - CERT studies Internet security vulnerabilities, handles computer security incidents, publishes a variety of security alerts, researches long-term changes in networked systems, and develops information and training to improve security.
• OECD Guidelines for the Security of Information Systems - The Guidelines are addressed to the public and private sectors.  The Guidelines apply to all information systems.  The Guidelines are capable of being supplemented by additional practices and procedures for the provision of the security of information systems.
• SANS (System Administration, Networking, and Security) Institute - SANS is a cooperative research and education organization for  system administrators, security professionals, and network administrators to share the lessons they are learning and find solutions to the challenges they face.

Comments, problems with the site?  Please report them to: security@dpmc.govt.nz 

Last Updated: 03-Nov-2004 10:50:13 a.m.