Technical Services for DoT Cyber Security Program

The Department of Transport (DoT) operates a complex information and communication technology (ICT) network comprised of many applications and the network infrastructure and services required to support them. All state government agencies are required to target maturity level 1 for the Essential Eight (E8) controls by December 2024. Based on DoT?s high-risk profile and low risk appetite, DoT must achieve a higher level of E8 maturity. Additionally, the DoT technical landscape is not static. Traditionally DoT had excellent perimeter defences but with the expansion of DoT?s technical environment and increased system integration with other agencies, cyber security controls become more complex and the risk profile of DoT increases without the strong foundation this Program will deliver across IT operations and project development. Business Information Systems (BIS) are responsible for ensuring that the Transport systems, along with the ICT infrastructure are maintained securely. These responsibilities include routine administration, maintenance and implementing specific security remediation and strengthening measures from time to time. The DoT has successfully initiated an over-arching Cyber Security Program (the Program), which is currently in its implementation and early delivery phase of some projects. The Program provides strategic direction, prioritises cyber security-related work based on risk assessment, and oversees the delivery of Essential 8 projects and other WA Cyber Security Policy work packages. To accelerate the delivery and enhance the scope of the Program, the DoT is seeking to procure additional resources. This expansion is essential to address evolving cyber threats promptly and to ensure the Program?s objectives are met within the desired timelines. This Request is to engage technical resources for the Program, including project management, cyber solution architecture and business analysis resources.