Transcription
Page 1ICT, Cyber Security and DigitalGovernment Strategy - Update for 2021Plan2020to 2025ICT, CyberforSecurityand Digital GovernmentStrategy 2020 to 2025OFFICIAL
Page 2SA Government’s priorities:More jobs, lower costs for families andbusiness, and better government services.IntroductionThe South AustralianGovernment is focused onproviding improved servicesto the local community tocreate a more prosperousand liveable state.The COVID-19 pandemic hasdemonstrated that the SouthAustralian community, includingbusinesses and individuals, aswell as government agencies,rely upon secure, resilientand innovative ICT, cybersecurity and digital services.ICT, Cyber Security and Digital Government Strategy 2020 to 2025The Department of thePremier and Cabinet (DPC), isresponsible for providing a broadportfolio of ICT, cyber securityand digital services to the SouthAustralian community and theSouth Australian Government.This bold and ambitious strategyoutlines the aspirations anddeliverables for South Australiaover the next three and five yearsrespectively, and is designedto contribute to the successof broader South AustralianGovernment strategies.Due to the interdependenciesbetween technology, cyber anddigital services, this strategybrings together these threedomains to ensure there is focuson the right priorities, in closecollaboration with agencies.The strategy is presented throughthe lens of four key principlesthat guide our actions, and threepriorities to enable the state tobe: (1) accessible and inclusive,(2) collaborative, and (3) secureand trusted. These priorities areunderpinned by internal enablers.The strategy also highlights thatservices are delivered to SA’sbusinesses and community as abroad stakeholder group, as wellas SA Government agencies. Itidentifies the strategy's goals forthe next three and five years.OFFICIAL
Page 3Update for 2021ForewardOver the last year, ICT and DigitalGovernment (IDG) has led thedevelopment and delivery ofcritical COVID-19 managementtechnology to support the state’sresponse to the COVID-19pandemic to keep South Australiasafe and strong. This includesthe COVID-Safe check-infunctionality, the COVID-19testing booking system, theHome Quarantine SA app, EntryCheck SA border applicationonline form, Health Check SAapp and integration of proof ofvaccination digital certificatesinto the COVID-Safe check-in.At the same time, IDG achieved amajor uplift in the South AustralianGovernment’s cyber securityposture, including working withall agencies to help addressrisks in legacy ICT infrastructureand assisting with theimplementation of the SA CyberSecurity framework, , all whilemaintaining critical governmentICT, Cyber Security and Digital Government Strategy 2020 to 2025ICT, Cyber Security and Digital Government Strategy 2020 to 2025infrastructure and rapidly standingup technology and platformsto meet the changing needs ofwork from home requirements sothat government agencies cancontinue to operate effectively.With additional expectations tosupport the government’s ‘Easyto do business with’ strategicpriority and recognition of thesignificant benefits alreadydelivered to the community,organisational changes wereannounced in October 2021,separating IDG into two divisions:the Office of the Chief InformationOfficer (OCIO) and the Officefor Digital Government (ODG).This new structure acknowledgesthe significance of our workprogram and ensures thedepartment is well placedto operate effectively andappropriately for a digitallyenabled government.OFFICIALOFFICIAL
Page 4Update for 2021Leader's forewardI am privileged to lead a team of professionals committed toproviding effective and innovative services to our customers acrossgovernment. We do this by working in collaboration with our industrypartners to ensure critical infrastructure and services providedto government agencies are resilient and innovative to enablethe SA Government to serve the South Australian community.Throughout the COVID-19 pandemic, digital technologies have, andcontinue to be a key enabler in keeping our community safe, and oureconomy strong. My team has worked tirelessly to design and developinnovative and customer-centric digital platforms and functionality tosupport South Australia's response to the COVID-19 pandemic inclose collaboration with service delivery agencies across government.We provide whole of government services in a number of keyareas, including Cyber Security, Unified Communications,ICT and Cyber governance, strategic engagement,architecture and critical government infrastructure.As more and more services are offered online, my team isfocused on an ambitious digital transformation program tomake it easier for citizens and businesses to simply, securelyand seamlessly access government services online.I am committed to delivering on our bold and ambitiousstrategy in partnership with agencies so they can continue tobe responsive to the needs of their customers and supportthe achievement of government’s broader objectives.I am proud to be at the forefront of improving the experience ofcustomers interacting with government, providing digital services thatmeet the needs of South Australian businesses and the community.Dr. Eva Balan-VnukChief Information OfficerOffice of the Chief Information OfficerJames GaldesChief Digital OfficerOffice for Digital GovernmentICT, Cyber Security and Digital Government Strategy 2020 to 2025ICT, Cyber Security and Digital Government Strategy 2020 to 2025OFFICIALOFFICIAL
Page 5Our priorities:1. Accessibleand inclusive2. Collaborative3. Secure andtrusted.ICT, Cyber Security and Digital Government Strategy 2020 to 2025VisionGuiding principlesOur peopleAs the thought leader and providerof many across governmenttechnology, cyber security anddigital government services, OCIOand ODG are working towards:The following guiding principlesare adopted when creatingnew services, modernisingexisting services, and supportingagencies and the community: OCIO is led by: Dr. Eva Balan-Vnuk Chief Information Officer Will Luker - Chief InformationSecurity Officer Nici Smith - Director, InternalOperations and Governance. Enabling South Australians tolive and thrive in a digital world.Embedding a co-designapproach in everything we do,to ensure SA Government’sservices are designed andbuilt around the needs ofbusinesses and the community.Providing leadership throughstrategy, partnership and actionto ensure SA Governmentdelivers smart, simple andsecure services to businessesand the community. Smart services that makethe best use of moderntechnology and resources.Simple services that are easyto use.Connected services that deliverbetter shared outcomes.Secure services that ensuretrust, privacy and peace of mind.ODG is led by: James Galdes Chief Digital Officer Robert Templeton Program Director, GovernmentServices Portal.OCIO and ODG have a highlyskilled, diverse workforce to meetthe demands of a constantlyevolving technology, cybersecurity and digital landscape.OFFICIAL
Page 6Priority areas 2020/211. Provide more inclusive access and seamlessservice delivery for citizens and businesses tosecurely interact with government online2. Build resilience and improve protectionof government assets and data3. Enable a connected, productive government,underpinned by the central Office 365 tenancy4. Enable modern communications services5. Enable government with modern networkarchitecture and capabilities.SA Government prioritiesSA Government agencies are workingcollaboratively to accelerate the state’seconomic recovery from COVID-19, and toensure the state is an attractive place tolive and do business, through leveragingexisting assets, and building new ones.OCIO and ODG actively collaborate andpartner with agencies to achieve positiveoutcomes for the state, including andnot limited to, the following initiatives:ICT, Cyber Security and Digital Government Strategy 2020 to 20251. Develop a more resilient and innovativecyber security industry centred in Adelaide’sinnovation hub, Lot Fourteen, through theAustralian Cyber Collaboration Centre (A3C)2. Address and reduce the cyber and digital skillsgap by developing education, training andpathways through cyber security traineeshipsfor government, development of cyber schoolcurriculum, and other skills growth activities.3. As a major end user of ICT platforms, cybersecurity and digital government services,ensure industry is aware and engagedwith government’s strategic direction4. Improve online accessibility of governmentservices for people living with disadvantage ora disability, in partnership with other agencies5. Improve the state’s cyber security postureby implementing the South AustralianCyber Security Framework (SACSF)across government, and improve theindustry’s awareness of the SACSF.OFFICIAL
Page 7What the strategy strives to achieve:As SA’s lead agency and the service provider of many acrossgovernment technology, cyber security and digital government services,OCIO and ODG are working towards achieving the following:Better accessEnable a betterdigital experience forgovernment employeesand the community.Shared responsibilityCultivate a collaborativecyber security approachthat brings together alllevels of governmentwith academia andthe private sector.1. Accessible and inclusiveBuild resilienceStrengthen the preventionof, detection of, responseto and recovery fromcyber security threatsand incidents.Seamless servicedeliveryReadying central digitalservices for the future.Influence leadership2. Collaborative3. Secure and trustedA connected governmentEnhance integration andcollaboration across SouthAustralian Government todeliver shared outcomes.ICT, Cyber Security and Digital Government Strategy 2020 to 2025ContemporaryarchitectureStrengthen the role ofgovernment in providingsound governance andclear accountabilitiesfor a whole ofgovernment approachto cyber security.Lift government’s capabilityto make it easy for citizensand businesses to interactwith government with acloud-first approach.OFFICIAL
Page 8Priorities:1. Accessible and inclusiveDesign and deliver technology,cyber security and digitalservices that are accessibleand meet the needs ofSouth Australian businesses,community and government.The South Australian Governmentis aware that it can be difficultfor individuals and businessesto transact with government.ODG is working on improving theway individuals and businessesinteract with government througha consent-based digital portal thatwill, over time, bring together auser’s interactions with the SouthAustralian Government into aconvenient single location. This isa multi-year, multi-agency initiativethat adopts a human centreddesign approach, consulting withusers as services are redesignedfor a better experience.nomination for the 2021 UnitedNations Public Service Awards.been generated online to ensurecompliance with restrictions.In 2019, the South AustralianGovernment was a finalist for theAustralian Human Rights Awardsfor the development of a publiclyavailable online accessibility policyand toolkit, to ensure governmentdigital platforms can be accessedand used by citizens, regardless ofdisability, digital literacy, device orlocation. This initiative has also beenawarded two Australian AccessAwards, including AccessibilityInitiative of the Year in 2019.SA Government websites providedby OCIO are certified WebContent Accessibility Guidelines(WCAG) compliant, improvingdigital inclusion in South Australia.Since the introduction of QRcodes in November 2020 therehave been over 870,000 planscreated for around 85,000 definedpublic activities, private activitiesor private functions. These plansare automatically updated byOCIO to incorporate any changesin restrictions and then sent tothe impacted businesses.South Australia’s approach to onlineaccessibility has received furtheraccolades including the PlainEnglish Campaign's Internet CrystalMark in 2019, 2020 and 2021 andICT, Cyber Security and Digital Government Strategy 2020 to 2025In response to the COVID-19pandemic, SA Governmentestablished a dedicatedCOVID-19 website in April 2020for South Australians, providinga dashboard of daily casesand a single trusted source ofinformation regarding governmentdirectives and restrictions. Therehave been more than 27 millionunique sessions since the websitewas launched, and more than 1million COVID-Safe plans haveOver the last decade, more than120,000 South Australians haveregistered to provide feedbackon government policies andinitiatives through the YourSAycommunity engagement platform.OFFICIAL
Page 99PagePriorities continued:1. Accessible and inclusiveAgencies run more than a hundredcommunity engagements eachyear to gain insights, feedbackand suggestions from SouthAustralians on initiatives rangingfrom single-use plastics tothe use of public spaces.Collaboration with othergovernments across Australiaalso brings benefits, suchas the Memorandum ofUnderstanding between theSouth Australian Governmentand the Commonwealth’s DigitalSouth Australian Governmentand the Commonwealth’s DigitalTransformation Agency, signedin December 2018, to allowSouth Australia to leverage thesignificant federal investmentin the Trusted Digital IdentityICT, Cyber Security and Digital Government Strategy 2020 to 2025Framework, to make it easier forAustralians to access servicesand transact with government.SA Government’s core network,StateNet, has provided significantvalue over the years, howevernow is the time to adopt zero trustnetwork principles.This modern approach, approvedin the state’s ConnectivityInfrastructure Strategy in November2021, will not only improve thestate’s security posture, it willalso make it easier for agenciesto adopt cloud-based services soagencies can be more responsiveto the needs of their customers.OFFICIAL
Page 101. Accessible and inclusiveDesign and deliver technology, cyber security and digital services that are accessibleand meet the needs of South Australian businesses, community and government.Services to SA’s businesses and communityAspirations by 2023aDeliver improvedcitizen and businessinteractions withgovernment viathe personalisedSA GovernmentServices Portalinitiative, inpartnership withagencies.Aspirations by 2025bcdefSupport agencies todesign new servicesincorporatingdigital inclusion,architectureprinciples andsecurity fromthe start.Deliver high speed,low cost, ubiquitousconnectivityacross more ofSouth Australia.Significant numberof citizen andbusiness servicesdelivered in apersonalised, secureand accessibleway via the SAGovernmentServices Portal.Deliver high speed,low cost, ubiquitousconnectivity acrossfurther parts ofSouth Australia.Consistent omnichannel experiencein transactingwith government(between in-person,online, chatbot etc).Services to SA GovernmentAspirations by 2023ghDeliver EnterpriseVoice solutionsbased on agencyuser personasfor consolidatedinvestment,economy ofscale and valuerealisation.Activecommunities ofpractice acrossgovernment,informing betterways of deliveringservices.Aspirations by 2025iProvide a robustset of wholeof governmentdigital platforms,including surveys,communityengagement,forms, websitesand others asrequired.ICT, Cyber Security and Digital Government Strategy 2020 to 2025jklContinue tomature themodel for servicetransformation toenable widespreadagency adoptionof and capability totransform servicedelivery for citizensand businesses.Expand the identityecosystem toencompass othersectors, includingfinance and retail.Widespreadagency adoptionof contemporarynetwork securityapproaches,including zero trustnetwork principlesfor governmentsystems andapplications.OFFICIAL
Page 11Priorities:2. CollaborativeEnable government innovation,efficiency and effectivenessthrough the provision of thelatest digital collaborationtools, to produce betteroutcomes and services forcitizens and businesses.As a significant buyer of goodsand services, the South AustralianGovernment has an obligationto engage professionally andresponsibly with partners andsuppliers for the benefit of the state.A number of industry forums havebeen hosted over the last two yearsto share government’s ICT, cybersecurity and digital governmentpriorities, as well as host uniqueconversations with industry, such asthe role of ethics in digital services,and the role of technology tosupport mind health and wellbeing.Ongoing dialogue about thisstrategy with industry will ensureour partners and suppliers canbetter support us in achievingour strategic aspirations.The South Australian Governmentrecognises that industry has manyinnovations and approaches thatcan benefit the state and how weoperate. Engaging at a strategiclevel with key partners and supplierswill increase the opportunity forgovernment to adopt relevant newapproaches and solutions that allowagencies to deliver better servicesto the South Australian community.and secure, including the state’scentral Office 365 tenancyused by the majority of agenciesand managed by OCIO. Asevidenced through COVID-19,rapid establishment of securecollaboration and communicationenvironments that allow for interagency problem solving hasbeen critical to delivering betterservices for South Australians.The South Australian Governmentacknowledges that private providersare best positioned to offer specificservices, such as hosting andcloud-based services. Thereforeit is intended that OCIO willcease offering hosting services toagencies within the next three years.The South Australian Governmentwill build on the existing foundationof services to continue to improvethe way agencies work together.OCIO will continue to providetechnical and strategic leadership,functionality deployment roadmaps,and practical toolkits andresources that agencies can useto improve their own productivityand internal capabilities.The South Australian Governmenthas a set of unique assets thatmake inter-agency collaborationand communication seamlessOCIO will leverage its uniqueperspective to bring togetherspecialist communities of practiceacross government to informICT, Cyber Security and Digital Government Strategy 2020 to 2025decision making, identify new andemerging technological solutions,confirm core shared service enduser needs for government, applybest practice across agencies,and to inform strategic priorities.OCIO will actively support theestablishment and continuationof communities of practice, forexample for enterprise architects,community engagementspecialists, and those committedto enabling online accessibility.There is an ongoing need forgovernment to provide modern,user friendly and efficient voice andunified communications services. Itis intended that the set of voice andunified communications servicesprovided by OCIO will consolidatebased on agency user personas toensure economy of scale, therebyenabling agencies to more efficientlyand effectively deliver services tothe South Australian community.OFFICIAL
Page 122. CollaborativeEnable government innovation, efficiency and effectiveness through the provision of the latestdigital collaboration tools, to produce better outcomes and services for citizens and businesses.Services to SA’s businesses and communityAspirations by 2025Aspirations by 2023aMeaningful andstreamlinedengagementwith the ICTindustry throughpresentations atvarious forumsto share SAGovernment’spriorities andopportunities,aligned with anoutcomes-based,early engagementapproach.bcdCo-design initiativeswith strategic ICT,digital and/or cybersecurity suppliersto deliver social andeconomic benefitto the state.Lead thedevelopment ofeasily consumableservices that make iteasy for businessesto use a digitalidentity (partner withCommonwealth,agencies, businessetc. to develop).Establishpartnerships withcyber securityorganisations toenhance cybersecurity capabilitiesand resiliencein SA’s small tomedium businesses.eAccessible,predictable earlyengagement withindustry to enableoutcomes-basedprocurements.fCo-design anddeliver social andeconomic benefitto the state inpartnership withstrategic ICT,digital and cybersecurity suppliers.Services to SA GovernmentAspirations by 2025Aspirations by 2023gContinue to maturethe model for servicetransformation toenable widespreadagency adoptionof and capability totransform servicedelivery for citizensand businesses.hExpand the identityecosystem toencompass othersectors, includingfinance and retail.iWidespreadagency adoptionof contemporarynetwork securityapproaches,including zero trustnetwork principlesfor governmentsystems andapplications.ICT, Cyber Security and Digital Government Strategy 2020 to 2025jContinuouslydevelop easilycustomisabletoolkits to enableagencies to adoptnew functionality asconveniently andquickly as possible(Office 365).klDeliver EnterpriseExit governmentVoice solutionshosting servicesbased on agencybusiness.user personasfor consolidatedinvestment,economy of scaleand value realisation.mActive communitiesof practice acrossgovernment,informing betterways of deliveringservices.nProvide a robustset of whole ofgovernment digitalplatforms, includingsurveys, communityengagement, forms,websites and othersas required.OFFICIAL
Page 13Priorities:3. Secure and trustedProtecting the safetyand prosperity of SouthAustralians online.It is imperative that the SouthAustralian Governmentdemonstrates its commitment toensuring the privacy and securityof South Australians is respectedand preserved, particularly as moretransactions and interactions moveto a more convenient and secureconsent-based digital format.This requires the South AustralianGovernment to continue toimprove its own security postureand capabilities, and supportSouth Australian businessesto be more cyber resilient.There is a global shortage of cybersecurity capability, and through keypartnerships with the AustralianCyber Collaboration Centre (A3C)at Lot Fourteen, Joint Cyber SecurityCentre (JCSC) and AustCyber,along with the Department forEducation and Department forInnovation and Skills, the strategysupports the development ofnew training and qualificationopportunities for secondarystudents and small businesses.In partnership with other agencies,OCIO in collaboration with theDepartment of Innovation and Skillsis supporting the developmentof initiatives to improve industrycapabilities in cyber securityICT, Cyber Security and Digital Government Strategy 2020 to 2025resilience, particularly for smalland medium businesses.adopting the SACSF whenengaging with agencies.The South Australian CyberSecurity Framework (SACSF),approved in December 2019,replaces the Information SecurityManagement Framework (ISMF),and OCIO is supporting agenciesto adopt the new framework basedon their requirements with thedevelopment of standards, policies,toolkits and artefacts that willaccelerate the ability of agenciesto comply with the SACSF, andimprove the state's security posture.This strategy will address thecreation and establishmentof enterprise architectureprinciples and artefacts incollaboration with agencies,enabling best practice sharingacross government, particularlybenefiting smaller agencies withfewer specialist resources.The government welcomesthe support of suppliers inOCIO will convene a governancestructure to improve alignmentacross government to supportthe secure adoption ofcloud-based services.OFFICIAL
Page 143. Secure and trustedProtecting the safety and prosperity of South Australians online.Services to SA’s businesses and communityAspirations by 2025Aspirations by 2023aBuild communitytrust in transactingwith governmentonline.bcIncrease SouthAustralia'scyber securitycapacity throughAustralian CyberCollaborationCentre (A3C), JointCyber SecurityCentre (JCSC)and AustCybersupportedprograms.dContribute to theimplementationof the SA CyberCapability Strategyfor industry (cyberaction plan tosupport economicgrowth, skills,protecting defenceand SMEs).eSA Governmentto be a significantemployer of newcyber securitytrainees.fSA establishedas the 'cyberstate' and heart ofAustralia’s cybersecurity industry.Broad communitytrust in transactingwith governmentonline.Services to SA GovernmentAspirations by 2023ghDeliver matureanalysis of eventsand forecastsof cyber risks.Proactivelyinvestigate andidentify possiblebreaches andtake appropriateaction to mitigateexposure and risk.iMonitor userbehaviour tominimise risk ofinsider threatand addresswhen it occurs.ICT, Cyber Security and Digital Government Strategy 2020 to 2025Aspirations by 2025jklmImprove maturityof ability todefend, detectand respond tosecurity incidentsthrough training.SA’s CyberSecurityFrameworkembedded andembraced assecurity standard.Enterprise securityarchitectureframeworkembedded acrossgovernment(secure by design).Bolster securityoperationalcapability for wholeof governmentservices managedby OCIO.nGovernment dataand assets arewell protectedfrom andproactivelymonitored forcyber securitythreats.opAgencies areequipped withthe training andresources requiredto defend, detectand respond tosecurity incidentsin a timely andconsistent manner.SA’s CyberSecurityFrameworkupdated to reflectcurrent trends andrequirements.OFFICIAL
Page 15Enablers:Internal to government approachOCIO facilitates a wholeof government governanceframework for the SouthAustralian Government thatprovides leadership, directionand advice to set the standards,policies and frameworksfor the development of ICT,digital and cyber securitysolutions for SA Government,connecting agencies to shareinformation and best practices.An inaugural Satisfaction Surveywas launched to agenciesin late 2020 to gain valuablefeedback on the servicesprovided to agencies, and informcontinuous improvements.The insights will also inform thetechnology, cyber security anddigital government roadmapsthat will influence the SouthICT, Cyber Security and Digital Government Strategy 2020 to 2025Australian Government’sinvestments in these areas.The survey will be repeatedannually to ensure OCIO isresponsive to feedback and deliversimproved value to agencies.OCIO will maintain acomprehensive ServiceCatalogue outlining servicesoffered to agencies.This will be updated regularlyand include the addition of newservices as they become available.OCIO and ODG will continue tomaintain frequent communicationswith stakeholders acrossgovernment, focused on colleaguesin ICT, digital and cyber securityareas, and expanding to businessstakeholders as relevant.OFFICIAL
Page 16EnablersWe facilitate a whole of government governance structure that provides leadership, direction and advice to set the standards, policies and frameworksfor the development of ICT, digital and cyber security solutions for SA Government, connecting agencies to share information and best practices.Aspirations by 2023aUse the annualAgency Survey toinform improvementsand priorities.bcdTechnology roadmap Cyber securityDigital governmentto inform technology roadmap to informroadmap to informinvestments across security investments. government servicegovernment.improvements.efResourcing profileto articulate whereincreased capabilityis required.Continually updateOCIO ServiceCatalogue providinga comprehensiveoverview of servicesto agencies.gOptimise thematurity ofproduct portfoliodevelopmentand delivery.hActive communitiesof practice acrossgovernmentinforming betterways of deliveringservices.iProvide a robustset of whole ofgovernment digitalplatforms, includingsurveys, communityengagement, forms,websites and othersas required.Aspirations by 2025jUse the annual IDGAgency Survey toinform improvementsand priorities.kMature, relevant andeffective technology,cyber security anddigital governmentroadmaps.ICT, Cyber Security and Digital Government Strategy 2020 to 2025OFFICIAL
Page 17ICT, Cyber Security and Digital Government Strategy 2020 to 2025W dpc.sa.gov.auE OfficeoftheCIO@sa.gov.auE OfficeforDigitalGovernment@sa.gov.auOFFICIAL
government technology, cyber security and digital government services, OCIO and ODG are working towards achieving the following: 1. Accessible and inclusive Better access Enable a better digital experience for government employees and the community. Shared responsibility Cultivate a collaborative cyber security approach that brings together all
