Date: Sun, 23 Jan 2022 12:55:57 +1100 Subject: Re: FOI 21/22-0740 - Communication - Acknowledgement - Response Required [SEC=OFFICIAL] From: Lesley <[FOI #8219 email]> To: foi <[NDIA request email]> Dear foi, Apologies, I was unaware of any artificial modification of FOI timelines such as elective 'down time' chosen by a Commonwealth Agency over the legislative requirements. I eagerly await a response to my FOI request. I believe the Log4j2 threat has only grown and expanded since I made the FOI request. Yours sincerely, Lesley -----Original Message----- Dear Lesley   Freedom of Information request - Acknowledgement   Thank you for your request of 21 December 2021, under the Freedom of Information Act 1982 (FOI Act) for copies of documents held by the National Disability Insurance Agency (NDIA).   Scope of your request You have requested access to the following documents about the National Disability Insurance Scheme (NDIS):   “Please provide a copy of the Salesforce cybersecurity assurance that confirms NDIS data, privacy and information has not been compromised, affected or is at risk due to the Log4j2 Security Flaw”   Unless you advise otherwise, we will take it that you agree to the names and contact details of NDIA staff being excluded from the scope of your request (that is, the information will be treated as irrelevant).   Processing timeframes A 30-day statutory period for processing your request commenced from 22 December 2021, in accordance with section 15(2A)(c) of the FOI Act.   Due to the NDIA’s reduced activity period between Christmas and New Year and the impact of the evolving COVID-19 situation affecting our agency operations, we are seeking your agreement to extend the processing time by an additional 14 days under section 15AA of the FOI Act. If you agree to this extension, you can expect to receive a decision from us on or before 9 February 2022. If you do not agree to the proposed extension of time, or you do not provide a response to our request, we may need to seek an extension of time with the Information Commissioner under section 15AB of the FOI Act. Therefore, we ask that you please provide a response by 10 January 2022. Charges We may apply a processing charge to your request and will advise you if a charge is payable as soon as practicable. We will not apply charges if you are requesting your own personal information.   Disclosure Log Please note that information released under the FOI Act may be published on the Agency’s disclosure log located on our website, subject to certain exceptions.   If you wish to raise any concerns about the publication of information concerning your request, please contact us.   Further assistance Should you have any queries about this matter, please do not hesitate to contact us via email at [1][NDIA request email]   We will contact you using the email address you provided. Please advise if you would prefer us to use an alternative means of contact.   Kind Regards   Freedom of Information Officer Parliamentary, Ministerial & FOI Branch Government Division National Disability Insurance Agency E: [2][NDIA request email]    [3]Title: NDIS delivered by the National Disability Insurance Agency The NDIA acknowledges the Traditional Custodians of Country throughout Australia and their continuing connection to land, sea and community. We pay our respects to them and their cultures and to Elders past, present and emerging.    References Visible links 1. mailto:[NDIA request email] 2. mailto:[NDIA request email] ------------------------------------------------------------------- Please use this email address for all replies to this request: [FOI #8219 email] This request has been made by an individual using Right to Know. This message and any reply that you make will be published on the internet. More information on how Right to Know works can be found at: https://www.righttoknow.org.au/help/officers Please note that in some cases publication of requests and responses will be delayed. If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page. -------------------------------------------------------------------