Skip to Content

- For guidance and resources on how to interpret and administer the Freedom of Information Act 1982 (Vic) including how to process FOI requests, calculate access charges and more visit FOI resources for agencies.
  
  Popular FOI links
  
  Practice notes
  
  FOI Guidelines
  
  Review decisions by year
  
  Search review decision database
  
  Professional Standards
- For guidance and resources on privacy obligations including the Information Privacy Principles, how to undertake privacy impact assessments and more visit Privacy resources for organisations.
  
  Popular privacy links
  
  Privacy Officer Toolkit
  
  Information privacy principles
  
  Information sharing and privacy
  
  Managing the privacy impacts of a data breach
  
  Report a privacy breach
- For guidance and resources on how to protect public sector information including how to implement the Victorian Protective Data Security Framework and Standards and more visit Information security resources.
  
  Popular information security links
  
  Victorian Protective Data Security Framework
  
  Victorian Protective Data Security Standards
  
  Reporting obligations hub
  
  Notify OVIC of an information security incident
  
  Victorian Information Security Network
- International Access to Information Day
  
  Regulatory actions and investigations
  
  Learn about what we do
  
  News and media
  
  Annual reports
  
  Submissions
- In Victoria you have the right to access documents held by government, to ask for your personal information to be amended, to make a complaint about the handling of your FOI request and to request an independent review of an FOI decision. Visit FOI resources for individuals for more guidance on your FOI rights.
  
  How to make an FOI request
  
  Make an FOI request online
  
  Learn how to apply for an FOI review
  
  Learn how to make an FOI complaint
  
  Find the contact details of an agency
- In Victoria you have privacy rights when interacting with government organisations which limit what personal information can be collected, how it is used and disclosed. If you suspect your privacy rights have been breached by a Victorian government organisation you can make a complaint to OVIC. For more guidance on privacy rights visit privacy resources for individuals.
  
  Privacy resources for individuals
  
  Your privacy rights
  
  Make a privacy complaint
  
  Guidance on data breaches
- Learn more about OVIC including our functions, Commissioners and structure.
  
  News and media
  
  Annual reports
  
  Our strategic plan
  
  Gender equality action plan
Events and education

From Monday 12 September 2020, OVIC's website will no longer be supported in Internet Explorer (IE).
We recommend installing Microsoft Edge, Google Chrome, Safari, Firefox, or Opera to visit the site.

Security Insights

Overview of Incident Insights Reports

The Incident Insights Report provides an overview and analysis of incident notifications received by OVIC under the information security incident notification scheme. Organisations are encouraged to use the insights within these reports to inform their own information security risk assessments. OVIC will publish these reports on an ongoing basis.

OVIC publishes these reports to enable Victorian public sector (VPS) organisations to use these insights to inform their own information security risk assessments.

These reports cover key areas captured in incident notifications, including:

information affected and format;
Business Impact Level (BIL) and corresponding BIL categories; and
security attributes and areas.

Reports also include the amount of notifications received and the portfolio in which agencies reside, and incidents submitted via OVIC’s voluntary privacy data breach reporting mechanism and the Department of Premier and Cabinet’s Cyber Incident Response Service (CIRS).

These reports provide statistics on the total number of notifications received under the scheme regardless of whether they:

meet the BIL 2 or above threshold; or
relate to in scope agencies under Part 4 of the Privacy and Data Protection Act 2014 (Vic).

These reports will provide VPS organisations with greater insights into the whole of Victorian Government threat landscape

Incident Insights Reports

2024

Download the Incidents Insights report for 1 January to 30 June 2024 as a Word file (.docx) or download the Incidents Insights report for 1 January to 30 June 2024 as a PDF file

2023

Download the Incidents Insights report for 1 July 2023 to 31 December 2023 (.docx)

Download the Incidents Insights report for 1 January to 30 June 2023 (.docx)

2022

Download the Incidents Insights report for 1 July to 31 December 2022 (.docx)

Download the Incidents Insights report for 1 January to 30 June 2022 (.docx)

2021

Download the Incidents Insights report for 1 July 2021 to 31 December 2021 (.docx)

Download the Incidents Insights report for 1 January 2021 to 30 June 2021 (.docx)

2020

Download the Incidents Insights report for 1 July 2020 to 31 December 2020 (.docx)

Download the Incidents Insights report for 29 October 2019 to 30 June 2020 (.docx)

Analytics are switched on and you are providing de-identified analytics to help us improve the way our website works.

Switch off to opt out.

Analytics are switched off and you are not participating in our analytics program.

Switch on to help us improve our website.

How we use cookies for analytics

We use cookies as part of our analytics program to collect high level de-identified information from your browser, about how our website is used. This information helps us make improvements to OVIC's website.

You may prevent us collecting this information by opting out of our analytics program.

For more details on how we use cookies, please read our privacy statement.