Independent assurance report to Parliament
Ordered to be published
VICTORIAN GOVERNMENT PRINTER May 2019
PP No 28, Session 2018–19
Dear Presiding Officers
We have consulted with BW, DELWP, EMV—response received from Department of Justice and Community Safety (DJCS)—MW, VDP and YVW, and we considered their views when reaching our audit conclusions. As required by section 16(3) of the Audit Act 1994, we gave a draft copy of this report, or relevant extracts, to those agencies and asked for their submissions and comments. We also provided a copy of the report to DPC.
Responsibility for the accuracy, fairness and balance of those comments rests solely with the agency head.
Responses were received as follows:
Effective cybersecurity management by water providers requires a risk-based approach to security, executive sponsorship, appropriately skilled security staff, and continual review and testing of the strength of security measures. The approach should be guided by leading industry security standards to ensure the security measures chosen are effective.
In recent years, cyberattacks have increased globally and government agencies across Australia are responding to escalating threats. Parliamentarians' emails have been compromised and hospitals' patient data has been hacked with ransoms demanded for its release. The importance of effectively securing computer systems and the information they hold is clear.
|
Throughout this report we refer to infrastructure control systems as 'control systems', and the water authorities and VDP as 'water providers'. |
| ACSC | Australian Cyber Security Centre |
| ASD | Australian Signals Directorate |
| BW | Barwon Water |
| DELWP | Department of Environment, Land, Water and Planning |
| DPC | Department of Premier and Cabinet |
| EM Act | Emergency Management Act 2013 |
| EMV | Emergency Management Victoria |
| IGEM |
Independent assurance report to Parliament
Ordered to be published
VICTORIAN GOVERNMENT PRINTER May 2019
PP No 26, Session 2018–19
Dear Presiding Officers
Figure C1
Analysis of LGPRF outcome indicators
|
Service area and LGPRF objective |
LGPRF outcome indicator |
VAGO analysis |
|---|---|---|
|
Aquatic facilities To provide safe, accessible and well utilised facilities |
Utilisation of aquatic facilities |
Figure B1
LGPRF service performance indicators
|
Service |
Indicator |
|---|---|
|
Aquatic facilities |
User satisfaction with aquatic facilities |
|
Health inspections of aquatic facilities |
|
|
Reportable safety incidents at aquatic facilities |
|
|
Cost of indoor aquatic facilities |
We have consulted with DELWP, Moonee Valley, Casey, Horsham, Baw Baw and Queenscliffe, and we considered their views when reaching our audit conclusions. As required by section 16(3) of the Audit Act 1994, we gave a draft copy of this report, or relevant extracts, to those agencies and asked for their submissions and comments. We also provided a copy of the report to the Department of Premier and Cabinet.
Responsibility for the accuracy, fairness and balance of those comments rests solely with the agency head.
Responses were received as follows: