ISMS community of practice

This group meets regularly to discuss information security and best practice for operating an information security management system (ISMS). We create and share implementation and management ideas, including checklists, hints and templates. It also provides an opportunity to meet other practitioners across the government.

Meetings are held both online using the GovTEAMS official platform and hybrid/in-person events.

Leading agency

Customer Services, Open Data and Small and Family Business

Attendees

The ISMS CoP is aimed at strategic (e.g. Executive Board Members), tactical (e.g. Cyber Security or HR Mangers) and operational (e.g. Cyber Security Professionals) staff involved in the entity’s ISMS.

Membership is voluntary and open to all Queensland government employees including Statutory entity, Government Owned Corporation (GOC) and Local Government Authority (LGA) employees who wish to implement, operate and mature their ISMS.

To request membership in the CoP, please apply online or contact cybersecurityunit@qld.gov.au.

Outcomes

The group will undertake the following activities:

• Focus on the implementation of the Information security (IS18:2018) policy and preparation of the IS18 annual return. Refer to reporting requirements for more information.
• Create internal business demand in member agencies for information security management.
• Make available to the group and where possible other agencies, lessons learned on implementing 27001, pragmatic solutions and good practices.
• Identify and develop methods to improve the 'information security brand' in the Queensland Government.
• Work on improving mechanisms and participation in security incident visibility.
• Develop and test processes for major security incident coordination and management.
• Review and guide updated Queensland Government Information security policy.

Meeting frequency

Meetings are online and hybrid/in-person events: Online meetings are held every 6 weeks; Hybrid/in-person events are held twice yearly

Contacts

Name: Cyber Security Unit

Email: cybersecurityunit@qld.gov.au