Search all QGEA policies and standards

Managing cyber risks in overseas travel factsheet

This factsheet recognises and addresses the cyber risk associated with international travel which is crucial for maintaining information and cyber security. 

Business services classification framework guideline

Queensland Government business services (business services) are defined as sets of activities that deliver value to or enable outcomes for Queenslanders through the delivery of business outputs.

Procurement and disposal of ICT products and services implementation guideline

This guideline provides advice when implementing the policy requirements of the Procurement and disposal of ICT products and services (IS13) policy.

Information security (IS18) implementation guideline (Repealed)

This guideline was repealed on 7 March 2019. This guideline provides information and advice for Queensland Government agencies to consider when implementing the mandatory principles of Information Standard 18: Information security(IS18)

ICT-as-a-service offshore data storage and processing policy (Repealed)

This policy was repealed on 14 February 2020. Ensuring departments adopt adequate risk management and governance procedures when making decisions associated with offshore storage of departmental data.

Program and project assurance policy

The establishment of a consistent assurance process is critical to improve confidence in information regarding programs and projects and to support successful delivery of ICT and ICT-enabled initiatives and services across the Queensland Government.

Replaced by: Portfolio, program and project management and assurance policy

Information security policy - IS18 mandatory clauses (Repealed)

The IS18 mandatory clauses was repealed on 7 March 2019. it detailed the mandatory clauses which must be included in agency’s Information Security Policy.

Licence review checklist

This checklist provides guidance in the steps involved for Creative Commons licensing in Queensland Government.

Web application security testing guideline

This guideline helps agencies ensures the confidentiality, integrity and availability of the agency data of web applications they use.

Examples of authorised and unauthorised use

A fact sheet of examples of authorised and unauthorised use of ICT facilities and devices for reference.