When "trust us" isn't enough: building confidence in information security

When a government agency entrusts sensitive data to external providers, confidence needs to be backed by evidence.

In 2020, the Australian Department of Education, Skills and Employment (now the Department of Employment and Workplace Relations) partnered with JASANZ to develop an accreditation scheme that would provide a consistent and transparent approach to assessing information security compliance across its network of employment service providers.

Working with a committee of technical, quality, and industry experts, JASANZ developed a scheme based on recognised information security standards, with additional focus areas including data sovereignty and assessor competency. The scheme provides accredited conformity assessment bodies with a clear framework for assessing providers against the Department's specific information security requirements.

Today, the scheme supports stronger information security practices through clear standards, independent assessment, and evidence-based accreditation decisions. JASANZ continues to work with the Department to support continual improvement and maintain trust in the organisations responsible for handling sensitive information.