The Department of Training and Workforce Development has implemented a Cyber Disclosure Program; a collection of processes and procedures designed to identify, verify, resolve, and report on vulnerabilities disclosed by people who may be internal or external to our organisation. The program, which aligns with the State Government’s Cyber security policy, will improve the Department’s cyber security posture and assist in risk mitigation.
The Cyber disclosure policy is a key component of the program, providing guidelines for security researchers on how to report vulnerabilities and what to expect in return from the Department. It describes:
- what systems and types of research are (and are not) authorised for testing;
- the principles and guidelines under which the policy applies;
- a definition of ‘research’ and reporting requirements;
- how to report any identified cyber vulnerabilities; and
- what can be expected from us in response to a report.
For further information regarding the policy, and how to report a cyber vulnerability, please visit the Department’s Cyber Disclosure Program page.
