Strategy & governance
Learn about the services provided by the team.
UNSW IT Cyber Security help protect our University community as well as inform, educate, and support your understanding of safe online behaviour, practices, and obligations around information security.
Cyber Security Strategy & Governance
Our team
Our Risk Advisory team provides a solution review of UNSW projects integrated with the Portfolio and Project Management Office (PPMO) processes. Our services include a formalised review process incorporating a risk and impact assessment called Cyber Security Risk Assessment (CSRA).
Our Governance and Risk Management team is responsible for the development, delivery, and oversight of University-wide cyber security policies, standards, and procedures. This includes ensuring compliance with policies and standards as well as ongoing cyber security risk management.
Our services
Strategy and Governance services, listed below, are provided via the MyCyberHub portal. If you need help with any of the services, please either submit a general request for cyber security advice or contact the IT Service Centre on for assistance.
Our achievements
UNSW achieves ISO/IEC 27001:2022 certification
In response to the increasing demand for robust and verifiable information security for sensitive research data, in 2024 UNSW achieved the globally recognised ISO/IEC 27001:2022 certification for its Information Security Management System (ISMS). Our achievements.
The ISO/IEC 27001:2022 standard outlines requirements for establishing, implementing, and continuously improving an ISMS within the context of an organisation’s business objectives and risks. By adhering to these requirements, UNSW strengthens its information security risk management framework while enabling continuous improvement and maturity of its cyber security practices.
The certification applies to information security within the provision, operational management, and support of IT systems for the following in-scope services:
- O365 email and Azure storage services (Outlook, OneDrive, SharePoint, and Teams).
- UNSW Research data archive.
- Storage services provided by UNSW shared drives.
- Secure Email Gateway services.
- UNSW IT managed endpoints.
The certification applies to the above in-scope services managed from UNSW's main campus in Kensington, Sydney, as well as UNSW Canberra at the Australian Defence Force Academy.
Reporting cyber incidents
It is important to report any cyber security incidents as quickly as possible so that the UNSW IT Cyber Security team can address any issues and mitigate risk exposure.
Incidents that staff and students should report:
- Suspecting your computer or account has been compromised.
- Having evidence on how technology or University data may be vulnerable.
- Noticing a colleague inappropriately sharing Highly Sensitive or Sensitive data.
- Losing a University asset containing sensitive information.
Contact the IT Service Centre for urgent matters or use the button above to report an incident.
Cyber security is everyone’s responsibility and by learning a few rules, simple steps, and following guidelines, we can protect our University from cyber security threats and keep data safe.
"Enhancing cyber security, including protecting information and privacy, is of paramount importance to our core functions of education and research. We all play a part in being cyber smart."
Professor Attila Brungs, Vice-Chancellor and President, UNSW Sydney