The Five Step Action Plan

To assist organisations in meeting the requirements of the Framework and Standards, OVIC has developed a Five Step Action Plan that sets out practical activities designed to assist in managing information security risks.

This document is intended for VPS organisations (including employees, contractors, and external parties) that are subject to the protective data security provisions under Part 4 of Victoria’s PDP Act. This document is primarily written to inform executives and designed to support information security practitioners.