GCSB Compliance Review – Final Report by Ian Fletcher, Director GCSB

This is the first report on the GCSB activities and change programme since the Compliance Review conducted by Rebecca Kitteridge was released on 9 April 2013.

This is the second report on the GCSB activities and change programme since the Compliance Review conducted by Rebecca Kitteridge was released on 9 April 2013.

This is the third report on the GCSB activities and change programme since the Compliance Review conducted by Rebecca Kitteridge was released on 9 April 2013.

This is the fifth report on the GCSB activities and change programme since the Compliance Review conducted by Rebecca Kitteridge was released on 9 April 2013.

This policy statement outlines the way in which GCSB ensures compliance with its obligations under sections 14 and 16 (1A) (B) of the GCSB Act 2003.

This is the fourth report on the GCSB activities and change programme since the Compliance Review conducted by Rebecca Kitteridge was released on 9 April 2013.

For further information, please refer to: www.protectivesecurity.govt.nz

The NCSC in partnership with the New Zealand CSSIE group has developed the NCSC Voluntary Cyber Security Standards for Industrial Control Systems to recognise and address cyber security risks associated with the operation of ICS technologies.

This procedure outlines the process and considerations that must be met in responding to information requests under the provisions of the Official Information Act 1982 and the Privacy Act 1993.

The purpose of this policy is to set out how GCSB will identify, retain and communicate such material, described in the GCSB Act 2003 as “incidental intelligence”.

This policy addresses GCSB’s obligations to protect personal information as required under the GCSB Act 2003 (in particular, sections 25A and 25B) and the Privacy Act 1993 (in particular, sections 6, 27-29, 57 and 81).

Review of Compliance conducted by Rebecca Kitteridge