PSPF Maturity Self-Assessment Model Personnel security Outcome: Each entity ensures its employees (and contractors) are suitable to access Australian Government resources and meet an appropriate standard of integrity and honesty. Table PSPF Maturity Self-Assessment Model – Personnel security Ad Developing Managing Embedded hoc Description Partial: Some PSPF core and Substantial: The majority of PSPF Full: All PSPF core and supporting Excelled: All PSPF core and supporting requirements are core and supporting requirements are implemented, supporting requirements are implemented although are not requirements are implemented, integrated into business practices implemented, are effectively well understood across the broadly managed and and effectively disseminated integrated and exceeding security entity. Security outcomes are understood across the entity. across the entity. Entity meets outcomes with better-practice not being achieved in some Entity is largely meeting security security outcomes. guidance achieving high areas. outcomes. performance. The entity partially has The entity has developed the Procedures and systems are in The entity excels in implementing Eligibility and procedures and systems in place majority of the entity’s place to ensure that all personnel efficient and timely processes to suitability to ensure personnel are eligible procedures and systems to ensure are eligible and suitable to access ensure the eligibility and suitability and suitable to access Australian that personnel are eligible and Australian Government resources. of personnel to access Government resources. suitable to access Australian All pre-employment screening Australian Government resources. screening is ad hoc Government resources. and security vetting (where All requirements are followed and and security vetting screening practices relevant) requirements are the entity has comprehensive requirements (where relevant) are substantially in place and followed. These procedures and practices in place to proactively are partially followed. Some risks security vetting requirements systems mitigate risks identified in manage risks identified in its associated with eligibility and (where relevant) mostly followed. the entity’s personnel security risk personnel security risk assessment. suitability of personnel are The entity manages the majority assessment. managed. of risks associated with eligibility and suitability of personnel.
PSPF Maturity Self-Assessment Model Personnel security Outcome: Each entity ensures its employees (and contractors) are suitable to access Australian Government resources and meet an appropriate standard of integrity and honesty. Table PSPF Maturity Self-Assessment Model – Personnel security Ad hoc Developing Managing Embedded Description Partial: Some PSPF core and supporting requirements are implemented although are not well understood across the entity. Security outcomes are not being achieved in some areas. Substantial: The majority of PSPF core and supporting requirements are implemented, broadly managed and understood across the entity. Entity is largely meeting security outcomes. Full: All PSPF core and supporting requirements are implemented, integrated into business practices and effectively disseminated across the entity. Entity meets security outcomes. Excelled: All PSPF core and supporting requirements are implemented, are effectively integrated and exceeding security outcomes with better-practice guidance achieving high performance. Eligibility and suitability The entity partially has procedures and systems in place to ensure personnel are eligible and suitable to access Australian Government resources. screening is ad hoc and security vetting requirements (where relevant) are partially followed. Some risks associated with eligibility and suitability of personnel are managed. The entity has developed the majority of the entity’s procedures and systems to ensure that personnel are eligible and suitable to access Australian Government resources. screening practices are substantially in place and security vetting requirements (where relevant) mostly followed. The entity manages the majority of risks associated with eligibility and suitability of personnel. Procedures and systems are in place to ensure that all personnel are eligible and suitable to access Australian Government resources. All pre-employment screening and security vetting (where relevant) requirements are followed. These procedures and systems mitigate risks identified in the entity’s personnel security risk assessment. The entity excels in implementing efficient and timely processes to ensure the eligibility and suitability of personnel to access Australian Government resources. All requirements are followed and the entity has comprehensive practices in place to proactively manage risks identified in its personnel security risk assessment.
govsec05-annexa-personnel-security.docx