Recent cybersecurity audit reports
Dear Services Australia,
I request access to the following documents under the Freedom of Information Act 1982:
1. Recent cybersecurity audit reports.
I understand that the term "recent" is broad, so I would be happy to narrow my request to specific audit reports if you can provide me with a list of any such audits conducted within the past few years.
Please exclude the following information:
i) Names of Services Australia staff below the Senior Executive level (junior staff).
ii) Direct staff telephone numbers, signatures, logon identifiers and email addresses.
Yours faithfully,
CR
Thank you for contacting the Freedom of Information (FOI) team in Services
Australia (the Agency).
This email acknowledges your correspondence and provides some general
information in relation to FOI.
Administrative release of documents
The Agency has administrative access arrangements ('the arrangements') for
the release of certain documents without the need for a formal FOI
request. If you agree to the release of documents under these
arrangements, we may provide you with documents under the arrangements,
where appropriate.
Any parts of your FOI request that are addressed by documents being
released under the arrangements will be considered withdrawn. The
arrangements do not extend to information or materials of third parties.
You will be notified when documents are released to you under the
arrangements.
Personal information of Agency staff
We consider staff details to be personal information of those staff
members. As part of the FOI application process, we will seek your consent
to exclude the following information from documents that may be captured
by your request:
* names of Services Australia staff below the Senior Executive level
(junior staff)
* direct staff telephone numbers, signatures, logon identifiers and
email addresses.
If you consent to exclude this information, we will treat it as outside
the scope of your request and therefore irrelevant under Section 22 of the
FOI Act.
Charges
No charge is payable for providing a person with their own personal
information.
If you are requesting non-personal information the Agency will advise you
as soon as practicable if a charge is payable to process your request, and
the amount of any such charge.
How we will send documents to you
Unless you have requested to receive correspondence and documents relating
to your FOI request via post we will communicate with you via this email
address. Some documents may be too large to send to you via email. If
applicable, we will seek your consent to provide the requested documents
to you electronically via a secure file sharing platform. Please advise us
as soon as possible if you wish correspondence or documents to be sent to
another address, or if your email address changes.
How long do I have to wait?
We are required to answer your request within 30 days unless the time
frame is extended under the FOI Act.