Meet requirements of own framework

The ANAO noticed that despite the importance of cyber security in safeguarding the Australian Government’s digital information, there has been ongoing low levels of cyber resilience of non-corporate entities and weaknesses in the regulatory framework for ensuring compliance with mandatory cyber security strategies. The audit focused on: cybersecurity risk management, application of related norms and level of a culture of cyber security resilience.

Cyber Resilience of Government Business Enterprises and Corporate Commonwealth Entities

AU 2019: Information security

Coordination and budget

The SAI Finland investigated whether cyber protection in central government had been arranged as effectively and cost-efficiently as possible. In their opinion, the rise of concern is required in operating modelling, design of procedures and change management approach.

Cyber protection arrangements

FI 2017: Information security , Change management

Consistency on strategic level

The Swedish NAO audited whether the Government’s efforts to strengthen national information and cyber security had been efficient. The audit’s focused on problems related to: strategy, coordination and international best practices.

Government control of national information and cyber security – both urgent and important

SE 2023: Information security

Cyberincident reporting needs to be quicker

The Swiss Federal Audit Office reviewed the effectiveness of the cyberinicident management process. In particular, the audit focused on issues relating to the timely flow of information from the sources to the Center, and on the processing this information with the Centre's own monitoring results. In addition, the detection of cyberincidents and the timely implementation of measures, as well as the flow of information to the relevant units, was assessed.

Audit of the effectiveness of incident management in protecting federal ICT from cyber-risks

CH 2022: Information security

Be prepared for breakdowns

Danish NAO underlines that public authorities depend on IT to deliver their services. Thus, major IT problems and loss of data relating to critical IT systems can have far-reaching consequences for the government, citizens and companies. The audit focused on IT contingency plans, secure continuity of operations and mitigation of the consequences of system breakdowns or data losses in the event of major IT breakdowns.

Cyber security resilience of the Danish public sector II

DK 2023: Information security