Safeguarding Australian Government data
The Australian Government is committed to ensuring effective controls are in place for its critical systems and data holdings. The rising use of online and digital services by Australians requires increased efforts to manage government systems and data holdings, effectively and securely.
A key policy to protecting Australian Government systems and the data they hold is the Hosting Certification Framework. It operationalises the principles outlined in the Whole-of-Government Hosting Strategy, in particular the requirement that all data must be hosted with the appropriate level of privacy, sovereignty, and security controls.
-
Framework overview
Under the Framework, all sensitive government data, Whole-of-Government systems and systems rated at the classification level of PROTECTED must be hosted using certified services.
-
Service Providers
Register interest or maintain Hosting Certification.
-
Government Customers
For government customers needing Certified Service Providers.
Machinery-of-Government transfer of cyber security-related policy functions from DTA to Home Affairs
On 1 May 2023, the Digital Transformation Agency (DTA) and the Department of Home Affairs (Home Affairs) implemented a machinery-of-government (MoG) change to transfer functional responsibility for the DTA’s cyber security-related policy functions to Home Affairs.
The machinery-of-government change involves the functional transfer of:
- the Hosting Certification Framework;
- the responsibility for the hardening government IT (HGIT) initiative, including the Cyber Hubs pilot and Gateway Policy (previously referred to as Secure Internet Gateway Policy); and
- other cyber policy related functions, including the Secure Cloud Strategy.
Whole-of-government cyber security
The Minister for Cyber Security is responsible for leading whole of government cyber security policy.
The transfer of cyber security-related policy functions will enable Home Affairs to:
- Support the Minister for Cyber Security in whole of government coordination of cyber security policy.
- Ensure that like-functions are situated to support the National Cyber Security Coordinator and within one agency to ensure alignment and delivery of the Australian Government’s broader agenda in relation to cyber security.
- Ensure that businesses, organisations and citizens have a single point of entry for engagement with the Australian Government.
Should you have any questions, our Hosting team is available to assist and can be reached by emailing HostingCertifications@homeaffairs.gov.au.