Cyber Security and Acceptable Use of ICT Policies

The Business and Information Systems Service are in the process of updating two policies:

1. Acceptable Use of Information and Communication Technology; and
2. Cyber Security Policy.

These are now both available for all staff consultation on Have Your Say.

Please use the submission form tab below to provide your feedback. Or email your questions/comments/suggested edits directly to Toby Adams, Program Leader Business Systems.

Background

The current policies were last adopted in 2020 and are now due for renewal in 2025. The policies apply to all users of Council’s ICT systems.

Summary of updates to the Acceptable Use of Information and Communications Technology Policy:

• Align with NSW Digital Strategy.
• Clarification on use of personal mobile devices.
• Improved controls on the termination of employees.
• Contractor’s and Consultant’s network login and account management.
• IT Asset responsibilities.
• IT access during International Travel.

Summary of updates to the Cyber Security Policy:

• Cyber NSW guidelines alignment.
• Recommendation on improvements from the Centium Internal Audit.
• Improvements from the recent Cyber incidents and breaches.
• Internal (GRSG, ARIC) and Cyber NSW reporting requirements.
• Section to align with the Data breach policy.

Contact: Toby Adams, Program Leader Business Systems, SCS, tadams@bmcc.nsw.gov.au

Closing date for feedback is COB on Friday 15 August 2025.