Policy update – security governance

Protective Security Policy Framework (PSPF) policy 5: Reporting on security has been updated. Changes have been made to the PSPF maturity model to:

• update the maturity levels and descriptors
• clarify the language and terminology used
• ensure appropriate alignment of the PSPF and the Essential Eight Maturity Models
• better reflect entities' operational experiences.

We will continue to periodically review the maturity model to ensure it remains fit-for-purpose.