The Australian Government Information Management Office Archive

Further Information

links

A number of references are mentioned throughout this guide. Further information can be obtained from the following sources:

• 'Internet Delivery Decisions' ANAO better practice guide http://www.anao.gov.au
• The Attorney-General's Commonwealth Protective Security Manual (PSM)
• NOIE website http://www.noie.gov.au/
• Defence Signals Directorate website for Points of Contact http://www.dsd.gov.au/infosec/ (click on 'Contacts' link)
• ACSI 33 - Security Guidelines for Australian Government IT Systems http://www.dsd.gov.au/infosec then hit "ACSI 33".
• ACSI 37 - Australian Government Standards for the Protection of IT Systems at the Highly Protected classification (Contact the information security group at DSD regarding availability)
• PGP http://www.pgpi.org/
• 'Gatekeeper - A strategy for public key technology use in the Government' OGIT May 1998 http://www.noie.gov.au/publications/GatekeeperStrategy.pdf
• Gatekeeper best practice standards include:
• X.509 (international standard for digital certificates) http://www.dante.net/np/ds/osi.html
• IETF RFC 2527 (X509 Certificate Policy and Certification Practices Framework) http://www.ietf.org/rfc/rfc2527.txt?number=2527
• ISO/IEC 17799-1 (Information Security Management) (formerly AS/NZS 4444) http://www.standards.com.au
• AS 4539 (Draft Australian standard on PKI) http://www.standards.com.au
• AS/NZS 4360:2000 (Risk Management) http://www.standards.com.au
• Commonwealth Protective Security Manual http://www.ag.gov.au/publications/psm.htm

National Archives of Australia:

• Recordkeeping component: http://www.naa.gov.au/recordkeeping
• Archives' publications, 'A policy for keeping records of web-based activity in the Commonwealth Government' and 'Guidelines for keeping records of web-based activity in the Commonwealth Government', available at: http://www.naa.gov.au/recordkeeping/er/web_records/intro.html