APPENDIX B REFERENCES – Agencies should have regard to the following statutes, NSW Government policies and standards: AS/NZS ISO 31000 Risk management Principles and guidelines – Electronic Transactions Act 2000 Government Information (Public Access) Act 2009 Health Records and Information Privacy Act 2002 ISO 27031-2011 Information technology Security techniques Guidelines for information and – – communication technology readiness for business continuity ISO 27001 Information technology Security techniques Information security management systems – – Requirements – ISO IT Security Techniques Guidelines for ICT Disaster Recovery Services – – NIST Definition of Cloud Computing SP800-145 NSW Government Digital + 2015 Update Privacy and Personal Information Protection Act 1998 Public Finance and Audit Act 1983 Public Interest Disclosures Act 1994 State Records Act 1998 APPENDIX C STANDARDS – Developing technical standards Development of a standard begins with identifying the need for a new standard, which is followed by the development of the standard in consultation with the industry and experts groups, including the Australian Information Industry Association (AIIA). The following diagram outlines the process. The ICT Procurement and Technical Standards Working (PTS Working Group) is chaired by the Department of Finance, Services & Innovation and includes senior representation from across NSW Government. Agencies engage with the PTS Working concerning services for inclusion in the ICT Services Catalogue. This drives the development of technical standards, where none exist. The PTS Working Group has the leading role in reviewing and endorsing the technical standards developed in response to agencies’ requirements. The PTS Working is supported by two sub-groups responsible for the areas of Telecommunications and Services and Solutions. The sub-groups are responsible for initial development and review of standards relating to their areas of responsibility. Management and implementation
APPENDIX B – REFERENCES Agencies should have regard to the following statutes, NSW Government policies and standards: AS/NZS ISO 31000 Risk management – Principles and guidelines Electronic Transactions Act 2000 Government Information (Public Access) Act 2009 Health Records and Information Privacy Act 2002 ISO 27031-2011 Information technology – Security techniques – Guidelines for information and communication technology readiness for business continuity ISO 27001 Information technology – Security techniques – Information security management systems – Requirements ISO – IT Security Techniques – Guidelines for ICT Disaster Recovery Services NIST Definition of Cloud Computing SP800-145 NSW Government Digital + 2015 Update Privacy and Personal Information Protection Act 1998 Public Finance and Audit Act 1983 Public Interest Disclosures Act 1994 State Records Act 1998 APPENDIX C – STANDARDS Developing technical standards Development of a standard begins with identifying the need for a new standard, which is followed by the development of the standard in consultation with the industry and experts groups, including the Australian Information Industry Association (AIIA). The following diagram outlines the process. The ICT Procurement and Technical Standards Working (PTS Working Group) is chaired by the Department of Finance, Services & Innovation and includes senior representation from across NSW Government. Agencies engage with the PTS Working concerning services for inclusion in the ICT Services Catalogue. This drives the development of technical standards, where none exist. The PTS Working Group has the leading role in reviewing and endorsing the technical standards developed in response to agencies’ requirements. The PTS Working is supported by two sub-groups responsible for the areas of Telecommunications and Services and Solutions. The sub-groups are responsible for initial development and review of standards relating to their areas of responsibility. Management and implementation
itsm_-_service_operations_standard_v1.0.docx