About the PSR

This overview of Protective Security Requirements (the PSR) outlines the government’s expectations for security governance and for personnel, information, and physical security.


Overview of the Protective Security Requirements

The PSR is a policy framework that sets out what your organisation must do to manage security effectively. It also contains best practice guidance you should consider following. The PSR is suitable for both public and private sector organisations.

Effective security enables New Zealand organisations to work together securely in an environment of trust and confidence. Protecting your people, information, and assets helps your organisation to meet its strategic and operational objectives.

Who this overview is for

This overview is for:

  • organisation heads
  • security management staff
  • contractors who provide protective security advice and services
  • anyone involved with the security of New Zealand Government personnel, information, and physical assets.

What this overview covers

This overview covers the PSR's core policies and mandatory requirements. It gives information on:

  • defining governance and management structures for security
  • identifying security risks and needs for personnel, information, and physical security
  • complying with the PSR's mandatory requirements.

Core policies of the PSR

The PSR’s core policies cover four key areas: security governance, personnel security, information security, and physical security.

The framework for the PSR

New Zealand's policy framework for protective security has four tiers and a hierarchical structure.

Complying with the PSR

The PSR describes when your organisation needs to consider specific security measures to comply with mandatory requirements.

Security governance

The PSR contains eight governance requirements which work together to ensure effective oversight and management of all security areas.

Personnel security

To protect government-held resources, your organisation must ensure that access to information and assets is only given to suitable people.

Information security

The New Zealand Government collects and receives information to fulfil its functions and expects all those who hold or access this information to protect it.

Physical security

Every New Zealand Government organisation must have physical security measures in place to protect people, information, and assets.