AUTHOR

Image of Ashwin Pal, Partner in the Risk Advisory division at RSM Sydney. Ashwin specialises in privacy and security consulting, governance, risk, and controls advisory, IT security testing and compliance, cyber risk management, cyber security transformation, and security technology implementation for clients in energy, utilities, government, health, mining, and manufacturing sectors.
Ashwin Pal
Partner

Earlier this year, the NSW Stage Government announced the release of the NSW CSP 4.0. One of the key drivers for this Policy is the uplift of cyber resilience in government in response to the significant increase in cyber attacks in Australia. 

Additionally, COVID has driven the need for digital transformation to quickly enable remote working for employees. This has led to two key things:ai_arificial_intelligence_machine_technology_innovation_simple_blue-15.png

  1. Fast tracked digital transformation projects where security was not the key focus increasing cyber risk exposure
  2. Increased remote access into government networks expanding the current attack surface.

In order to address the above drivers, any State Government agency needs to understand the risk they are exposed to. Only once this risk is understood, can an agency then start to address the risk and mitigate it to an acceptable level.

RSM Australia specialises in helping organisations such as State Government agencies to understand and mitigate their cyber risk. We focus on benchmarking agencies against the NSW CSP 4.0 policy to understand cyber control gaps and provide practical ways to manage these gaps.

Since our consultants have practical implementation experience, the remediation advice provided are items that can actually be implemented within your environment to enhance cyber security controls in line with the NSW CSP 4.0.

RSM Australia is now on the Prequalification Scheme for ICT Services. We are qualified to supply capabilities in 17 different categories to the Scheme including Business Continuity Planning, Security Strategy including delivery "as a service" and Security Testing including delivery "as a service".  This greatly eases the engagement process, and we look forward to assisting you in enhancing your cyber resilience in line with the NSW CSP 4.0.

The NSW Government ICT Services Scheme (the Scheme) is a mandatory whole-of-government arrangement by which suppliers deliver ICT services to NSW Government. This arrangement ensures NSW government agencies can find and procure the goods and services that best meet their needs and makes it easier for industry to do business with government. The Scheme arose from extensive consultation about how government and industry can make the most of procurement opportunities.

RSM Australia is qualified to supply the following capabilities to this Scheme:

  • A01. Enterprise & Business Architecture
  • A02. Information Architecture
  • B01. Benchmarking
  • E01. ICT Strategy
  • E02. Procurement Management
  • E03. Efficiency & Optimisation
  • H01. Strategic Risk Management
  • H02. Business Continuity Planning
  • H03. Capacity & Availability Planning
  • H04. Process & Technology Audits
  • I01. Program Office Standards
  • I02. Project, Program & Portfolio Management
  • I03. Change Management
  • I04. Quality Assurance & Compliance
  • K01. Security Strategy including delivery "as a service"
  • K03. Security Testing including delivery "as a service"
  • M01. Business Analysis

For more information

contact our Risk Advisory Team