How to find things on our refreshed website >>
Explore
Close up of a laptop keyboard lit by the screen tilted above it

Victorian Government Cyber Maturity Benchmark

An annual self-assessment of baseline cyber security controls across the Victorian Government

The Victorian Government Cyber Maturity Benchmark is an annual self-assessment of baseline cyber security controls across the Victorian Government.

The State Government of Victoria established its first baseline of cyber risk maturity in September 2021. Since then, more than 200 government agencies have taken part in the self-assessment annually and gained valuable insight into their cyber security maturity. The Benchmark delivers on the Victorian Cyber Strategy 2021(opens in a new window) Mission 1: The safe and reliable delivery of government services.

The Benchmark

The self-assessment uses the current Australian Cyber Security Centre’s Essential Eight Maturity Model(opens in a new window).

“Implementing the Essential Eight proactively can be more cost-effective in terms of time, money and effort than having to respond to a large-scale cyber security incident”. (ACSC 2021)

You can read more about the current Essential Eight model in the ACSC FAQs(opens in a new window).

Completing the self-assessment can help organisations to:

  • review and understand the maturity of your organisation’s baseline cyber controls
  • produce reports that can be used to make decisions about investment in cyber security improvements
  • support Victorian Protective Data Security Standard (VPDSS) attestation for Standard 11: ICT Security by providing information about technical controls
  • compare your organisation’s cyber maturity against a whole-of-government benchmark or selected sectors.

The Benchmark also helps the Department of Government Services and VMIA to understand cyber maturity across the Victorian public sector, and to make informed, data-driven decisions about how to improve the State’s cyber security and recovery.

Want to know more?

If you have any questions about the self-assessment framework, email the Cyber Risk team at DGS at cyber.risk@dgs.vic.gov.au.

If you require further help with VMIA's Self-Assessment Hub, email cyberservice@vmia.vic.gov.au

Updated