These roles are within the department’s IT Security Section. This section is responsible for all aspects of cyber security within the department and across the health portfolio, and is led by the Director of IT Security. The section provides risk, accreditation and policy advice in which information security principles are applied to the department’s devices, networks, applications and digital data. The section’s primary focus is ensuring the effective implementation of security practices to ensure that department’s people, information and assets, are appropriately protected in accordance with the Australian Government Protective Security Policy Framework (PSPF) and Information Security Manual (ISM).