Skip to content

Is the PSPF mandatory?


Yes, the Protective Security Policy Framework (PSPF) is mandatory for non-corporate Commonwealth entities. The PSPF outlines the minimum security requirements for the protection of Commonwealth assets, personnel, information and systems. The PSPF is developed and maintained by the Attorney-General's Department and applies to all non-corporate Commonwealth entities.

It is mandatory for all non-corporate Commonwealth entities to comply with the PSPF in order to protect Commonwealth assets, personnel, information and systems. The PSPF is supported by the Australian Government Security Vetting Agency, which provides security clearances to personnel within the Commonwealth and provides advice and guidance on the implementation of the PSPF.

In addition to the PSPF, non-corporate Commonwealth entities must also report to their portfolio minister and the Attorney-General's Department each financial year on security. This is to ensure that the security of Commonwealth assets, personnel, information and systems is maintained and that any breaches of the PSPF are reported and addressed.

General thought leadership and news

Hailey goes deeper: Automatic risk and issue generation for assessments

Hailey goes deeper: Automatic risk and issue generation for assessments

Hello everyone, we're excited to introduce a powerful new feature for Hailey AI: risk and issue generation from assessments. This update...

Soup to nuts: Aligning technology with your end-to-end service delivery model

Soup to nuts: Aligning technology with your end-to-end service delivery model

This case study highlights the challenges faced by a global advisory firm looking for a comprehensive technology platform to support their entire...

Enhancing 6clicks’ Continuous Control Monitoring with Microsoft Defender for Cloud Integration

Enhancing 6clicks’ Continuous Control Monitoring with Microsoft Defender for Cloud Integration

6clicks recently launched its Continuous Control Monitoring (CCM) capability, along with its integration with cloud security platform, Wiz, to...

6clicks recognized as a Cool Vendor in the 2024 Gartner® Cool Vendors™ in Third-Party Risk Management

6clicks recognized as a Cool Vendor in the 2024 Gartner® Cool Vendors™ in Third-Party Risk Management

San Francisco, California – 09 October 2024.  6clicks, the leading provider of AI solutions for cyber governance, risk, and compliance (GRC),...

New feature alert: Automatic updates to control linkages

New feature alert: Automatic updates to control linkages

Earlier this year, 6clicks released the Compliance Gap Assessment feature which enables users to quickly understand the changes to a standard,...

6clicks joins Wiz Integration Network (WIN) for Continuous Control Monitoring

6clicks joins Wiz Integration Network (WIN) for Continuous Control Monitoring

San Francisco, California—3 October 2024.  6clicks, pioneer of AI-powered governance, risk, and compliance (GRC) software, is thrilled to announce...