Cyber Security Assessment for Mail Subscription Service
Dear Australian National Audit Office,
Whilst I understand you are an exempt agency the following request is made in 'good-faith' in light of the role that your agency conducts in assuring the cyber-resilience of other Government agencies.
Can you please provide a copy of the risk assessment conducted as part of selecting Mail Chimp as your email subscription service, and any documents relating to assessing their compliance with either the ASD Top 4 or the ASD essential 8.
Yours faithfully,
Roger Smith
Dear Australian National Audit Office,
I was wondering if you are having any luck with this request?
Yours faithfully,
Roger Smith
Dear Mr Smith
The ANAO is unable to process your request under the Freedom of
Information Act 1982 (the FOI Act), as under schedule 2 of the FOI Act the
Auditor-General is listed as an ‘Exempt agency’ and on the basis that the
ANAO is not an entity to which the FOI Act applies.
The [1]ANAO Privacy Policy details that some functionality of the ANAO
website is run by third parties.
Regards
Peta Martyn
Australian National Audit Office
-----Original Message-----
From: Roger Smith [mailto:[FOI #3733 email]]
Sent: Wednesday, 19 July 2017 5:58 PM
To: ag1
Subject: Freedom of Information request - Cyber Security Assessment for
Mail Subscription Service
Dear Australian National Audit Office,
Whilst I understand you are an exempt agency the following request is made
in 'good-faith' in light of the role that your agency conducts in assuring
the cyber-resilience of other Government agencies.
Can you please provide a copy of the risk assessment conducted as part of
selecting Mail Chimp as your email subscription service, and any documents
relating to assessing their compliance with either the ASD Top 4 or the
ASD essential 8.
Yours faithfully,
Roger Smith
-------------------------------------------------------------------
Please use this email address for all replies to this request:
[2][FOI #3733 email]
Is [3][ANAO request email] the wrong address for Freedom of Information
requests to Australian National Audit Office? If so, please contact us
using this form:
[4]https://www.righttoknow.org.au/change_re...
This request has been made by an individual using Right to Know. This
message and any reply that you make will be published on the internet.
More information on how Right to Know works can be found at:
[5]https://www.righttoknow.org.au/help/offi...
If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.
-------------------------------------------------------------------
--------------------------------------------------------------------------
****************************************************************************************
This information contains confidential information intended only for the
use of the authorised recipient. If you are not an authorised recipient of
this e-mail, please contact the Australian National Audit Office by return
e-mail. In this case, you should not read, print, re-transmit, store or
act in reliance on this e-mail or any attachments, and should destroy all
copies of them. This e-mail and any attachments may also contain copyright
material belonging to the Commonwealth represented by the Australian
National Audit Office. The views expressed in this e-mail or attachments
are the views of the author and not the views of the Australian National
Audit Office. You should only deal with the material contained in this
e-mail if you are authorised to do so.
This notice should not be removed.
References
Visible links
1. https://www.anao.gov.au/work/corporate/a...
2. mailto:[FOI #3733 email]
3. mailto:[ANAO request email]
4. https://www.righttoknow.org.au/change_re...
5. https://www.righttoknow.org.au/help/offi...