Definition

Victoria Police must ensure that all Victoria Police employees understand their roles and responsibilities in relation to information security.

When engaging a contractor or consultant, Victoria Police remains accountable for the secure performance of the function that the contractor or consultant is to perform.  Victoria Police must ensure that contractors and consultants are fully aware of the information security policies and guidelines and that they undertake appropriate security precautions when handling law enforcement data and performing functions for Victoria Police.

Victoria Police must require that all Approved Third Parties have information security policies and procedures that reflect Victoria Police law enforcement data security requirements.  Approved Third Parties must also be required to ensure that all staff who access law enforcement data are fully aware of the information security policies and guidelines and that they undertake appropriate security precautions when handling law enforcement data.

Application

These standards apply to all Victoria Police employees, contractors, and consultants and any Approved Third Parties who by way of Agreement with Victoria Police have authorised access to law enforcement data.

Standard 3

Standard 4

Standard 5

Standard 6

Standard 7