Skip to main content

The Administrative Arrangements Order of 3 August 2023 transferred responsibility for protective security policy, including the Protective Security Policy Framework, from the Attorney-General’s Department to the Department of Home Affairs. These Machinery of Government (MOG) changes began on 4 August 2023.

The PSPF Reporting Portal will transfer to the Department of Home Affairs on 24 May 2024. Before 24 May 2024, all entities and users must set up new authentication credentials through VANguard. You can get more information by contacting the Government Protective Security Policy section at or the PSPF hotline on 02 5127 9999.

The new Protective Security Policy Framework commenced on 1 October 2018

It's here! The new Protective Security Policy Framework (PSPF) commenced on 1 October 2018 to assist Australian Government entities protect their people, information and assets, at home and overseas. These significant reforms will improve clarity, reduce unnecessary 'red tape' and foster a strengthened security culture across government agencies.

The reforms address findings from the 2015 Independent Review of Whole-of-Government Internal Regulation and ensures the PSPF keeps pace with international best practice by:

  • building and maintaining a strong security culture that effectively engages with risk
  • addressing the threat of the malicious insider through improved personnel security, and
  • increasing the cyber security of government networks and information.

The reforms were developed by the Attorney-General's Department in consultation with stakeholders across government and will apply to all non-corporate Commonwealth entities from today. Corporate Commonwealth entities and Commonwealth companies are encouraged to adopt the policy as best practice.

The PSPF is a living document and may be updated to reflect new and emerging issues, developments in protective security best practice and changes in Government policy. Significant changes will be noted on this page.