Audit report – Standard 10 of the Victorian Protective Data Security Standards (Personnel Security)
OVIC conducted an audit to assess four Victorian Public Sector (VPS) organisations’ adherence to Standard 10 of the Victorian Protective Data Security Standards (VPDSS), and to identify areas for improvement.
The organisations audited were the Commission for Children and Young People, Department of Premier and Cabinet, Victorian Funds Management Corporation, and Victorian Managed Insurance Authority.
OVIC sought to determine whether the four organisations have in place appropriate policies, practices and procedures addressing the pre-engagement phase of personnel security. This includes verifying a person’s identity, and undertaking appropriate screening measures to assess the suitability and eligibility of prospective employees.
The report highlights lessons for each of the audited organisations, and the VPS more broadly.
Read the audit report.
