Shane Moffitt
Victorian Government
Shane is the assistant Chief Information Security Officer (CISO) for the Victorian government.

Prior to his appointment in 2018, Shane was the Oceania lead for ISO 27001 at EY and is an accredited Australian Signals Directorate IRAP assessor.

Shane is responsible for the implementation of the Victorian cyber security strategy. With a passion for delivering meaningful change, Shane has identified an effective whole of state training and awareness program as critical to the safe delivery of services.

Cyber security training for Whole of Victorian Government
Technical Level (3 being the highest score): 1

The Victorian government is one the largest and most diverse enterprises in Australia consisting of 297,000 directly employed staff across entities including police, water utilities, emergency services, hospitals and financial services.

Developing an approach to improve cyber security behaviours across the enterprise has required an analysis of what is causing harm, what needs to change, how this can be achieved and how do we know if we have succeeded.

This presentation will cover how the Victorian government is approaching this challenge and share lessons learnt on the continuing journey.

Presentation Substance
As part of the Victorian government cyber security strategy, The Department of Premier and Cabinet (DPC) is responsible for the development and delivery of a training and awareness program across the Victorian government. The following sections outline the approach taken.

Due the large and diverse nature of the Victorian government, a simple and scalable approach was required. To this end the Victorian workforce was divided into three relevant categories:
• Executives – people entrusted to make senior decisions on behalf of the organisation
• ICT workers – people responsible for the operation of ICT equipment
• General workers – all types of workers from teachers, accountants, police officers and nurses

Behavioural change
Based on our knowledge of what incidents were causing the most harm across the Victorian government desired behavioural changes were identified.

Awareness campaign
The purpose of the awareness campaign is to drive interest in the associated training. Two short videos have been created. This will be shown in the presentation.

Presentation slides can be found HERE

Presentation video can be found HERE