This is an HTML version of an attachment to the Freedom of Information request 'NDIS - Salesforce Security Vulnerability Assurance (Log4j2)'.

Date: Sun, 23 Jan 2022 12:55:57 +1100
Subject: Re: FOI 21/22-0740 - Communication - Acknowledgement - Response Required [SEC=OFFICIAL]
From: Lesley <xxxxxxxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxx.xxx.xx>
To: foi <xxx@xxxx.xxx.xx>

Dear foi,

Apologies, I was unaware of any artificial modification of FOI timelines such as elective 'down time' chosen by a Commonwealth Agency over the legislative requirements.

I eagerly await a response to my FOI request. I believe the Log4j2 threat has only grown and expanded since I made the FOI request.

Yours sincerely,

Lesley

-----Original Message-----

Dear Lesley

 

Freedom of Information request - Acknowledgement

 

Thank you for your request of 21 December 2021, under the Freedom of
Information Act 1982 (FOI Act) for copies of documents held by the
National Disability Insurance Agency (NDIA).

 

Scope of your request

You have requested access to the following documents about the National
Disability Insurance Scheme (NDIS):

 

“Please provide a copy of the Salesforce cybersecurity assurance that
confirms NDIS data, privacy and information has not been compromised,
affected or is at risk due to the Log4j2 Security Flaw”

 

Unless you advise otherwise, we will take it that you agree to the names
and contact details of NDIA staff being excluded from the scope of your
request (that is, the information will be treated as irrelevant).

 

Processing timeframes

A 30-day statutory period for processing your request commenced from 22
December 2021, in accordance with section 15(2A)(c) of the FOI Act.

 

Due to the NDIA’s reduced activity period between Christmas and New Year
and the impact of the evolving COVID-19 situation affecting our agency
operations, we are seeking your agreement to extend the processing time by
an additional 14 days under section 15AA of the FOI Act. If you agree to
this extension, you can expect to receive a decision from us on or before
9 February 2022.

If you do not agree to the proposed extension of time, or you do not
provide a response to our request, we may need to seek an extension of
time with the Information Commissioner under section 15AB of the FOI Act.
Therefore, we ask that you please provide a response by 10 January 2022.

Charges

We may apply a processing charge to your request and will advise you if a
charge is payable as soon as practicable. We will not apply charges if you
are requesting your own personal information.

 

Disclosure Log

Please note that information released under the FOI Act may be published
on the Agency’s disclosure log located on our website, subject to certain
exceptions.

 

If you wish to raise any concerns about the publication of information
concerning your request, please contact us.

 

Further assistance

Should you have any queries about this matter, please do not hesitate to
contact us via email at [1][NDIA request email]

 

We will contact you using the email address you provided. Please advise if
you would prefer us to use an alternative means of contact.

 

Kind Regards

 

Freedom of Information Officer

Parliamentary, Ministerial & FOI Branch

Government Division

National Disability Insurance Agency

E: [2][NDIA request email]

 

 [3]Title: NDIS delivered by the National Disability Insurance Agency

The NDIA acknowledges the Traditional Custodians of Country throughout
Australia and their continuing connection to land, sea and community. We
pay our respects to them and their cultures and to Elders past, present
and emerging. 

 

References

Visible links
1. mailto:[NDIA request email]
2. mailto:[NDIA request email]

-------------------------------------------------------------------
Please use this email address for all replies to this request:
xxxxxxxxxxxxxxxxxxxxxxxxx@xxxxxxxxxxx.xxx.xx

This request has been made by an individual using Right to Know. This message and any reply that you make will be published on the internet. More information on how Right to Know works can be found at:
https://www.righttoknow.org.au/help/officers

Please note that in some cases publication of requests and responses will be delayed.

If you find this service useful as an FOI officer, please ask your web manager to link to us from your organisation's FOI page.

-------------------------------------------------------------------