To the whole team - thanks for the effort and support last week in getting my security clearance back on track. With everything I had going on it was one stressful thing I didn't need and thanks again for your support.

My company has aspiring IRAP Assessors and they need AGSVA NV1s, thanks for working with us on this.

Our Defence Prime put us in touch with Cleard life, because they are not willing to manage clearances for their supply chain.

You saved us by taking on our previously cleared staff who did not have a current sponsor because we could not sponsor at the required higher level- we could have lost our contract. Huge thanks.

Only trusted and vetted personnel are granted access to systems, applications and data repositories.

Australian Government agencies must act consistently with the policies of the Australian Government, such as the Attorney General’s Protective Security Policy Framework.

“Fast results. Laser-like focus. Deep insight - all for a fixed-fee. Thank you!”

With the increased connectivity and explosion in computing capability, malicious actors of all types – including insiders – we need to have more opportunities and greater incentive to identify and exploit vulnerabilities, and employees have more opportunities to make mistakes.

“The fact that our recruitment process was not disrupted was perfect for us.”

We recommend minimum personnel vetting to the same levels across industry and therefore ensuring that sensitive data/information doesn’t find its way to someone that it shouldn’t.

Cyber Crime has evolved into an industry that will not go away and 2020 will be a 'watershed year' where many organisations will have to 'prove' they have adequate Cyber Security and Cyber Resilience to their stakeholders such as Insurers, Regulators, Financiers, Suppliers, and Customers. Enterprise values will be dependent upon the quality of this "proof."

"Personnel management is a key part of cyber security: "Only trusted and vetted personnel are granted access to systems, applications and data repositories."

Are there any barriers currently preventing the growth of the cyber insurance market in Australia? If so, how can they be addressed? Two barriers; trust and cost. The recent Banking Royal Commission highlighted the lack of trust of insurance companies generally in Australia, unfortunately for good reason.

What are the constraints to information sharing between Government and industry on cyber threats and vulnerabilities? A simplified security “clearance” for this particular purpose could be considered on both permanent and temporary/as needed basis.

In recent times there has been a continuous evolution of policy, as the Protective Security Policy Framework (PSPF) has shifted focus from whole-of-government to whole-of-economy. The emphasis is for the PSPF to be supported and taken up by small and medium enterprises (SMEs) and the broader industry.

To overcome these constraints, the Australian government could consider setting up a trusted vendor program. After vetting and under strict controls, more sensitive information can then be shared by Government to help industry counter cyber-attacks or develop better capabilities.

"Personnel undergo appropriate employment screening, and where necessary hold an appropriate security clearance, before being granted access to a system and its resources."

If an employee gains authorised access to a network and uses it for malicious purposes, this is a personnel security issue. This is a point that was somewhat overlooked in Australia’s Cyber Security Strategy 2016. All security areas are equally important for organisations to consider.