What you need to know
Protective Security Requirements – roles and responsibilities
Agency heads are responsible and accountable for protective security within their agency.
The Protective Security Requirements (PSR) outlines the Government’s expectations for managing personnel, physical and information security. It clearly sets out what agencies must and should consider to ensure they are managing protective security effectively.
By implementing the PSR you will:
- better manage business risks
- assure continuity of service delivery
- assure the Government and the public you have appropriate, effective measures in place to protect New Zealand’s people, information and assets.
The PSR provides you with:
- core policy documents that describe the high level mandatory requirements that agencies are required to implement and report against
- protocols and management requirements that provide further direction on how to meet the mandatory requirements.
What you need to do
Agency heads and senior managers are to apply the Protective Security Requirements (PSR) with the understanding it provides pathways for successfully protecting people, information and assets.
As agency heads and senior managers, your responsibilities include:
- developing a strong and sustainable security culture within your agency
- reviewing your agency’s protective security management policy and procedures regularly as part of your agency’s approach to risk management and business planning
- ensuring the PSR mandatory requirements are being met and ensuring relevant oversight is in place
- appointing a Chief Security Officer (CSO) and working with them as they develop, maintain, and oversee protective security policy and practices
- endorsing security risk management structures, assurance activities and resource allocation
- endorsing your agency’s policies and protocols for personnel, information and physical security
- granting security clearances to staff and contractors after receiving a recommendation from the New Zealand Security Intelligence Service (NZSIS).