Alignment and exceptions

Alignment with the QGEA means having achieved or being on track to meet the policy and reporting requirements set within QGEA policies.

There are cases where government bodies may be unable to meet these requirements and/or not meet specified time frames. In these cases, the QGEA exception process exists to allow government bodies to understand the associated risks from both their own and whole-of-government perspectives and get these documented and signed off by the appropriate authority.

What QGEA documents does the exception process apply to?

Generally, exceptions apply to policy and reporting requirements, and targets within QGEA policies as these state specific rules.

Exceptions to QGEA principles can be applied for where deemed necessary. However, it is not expected that this scenario would be common as principles are core beliefs and values that guide decision making. At times principles may conflict as they are designed to assist in making decisions in different contexts and changing environments.

Does my government body need to apply for a QGEA exception?

Generally, the exception process applies to departments, directed government bodies and any entities in scope of QGEA documents with broader applicability. For more information see Applicability of the QGEA which includes a list of documents with broader applicability.

How do I apply for an exception?

To gain an exception, government bodies must provide evidence that a risk assessment has been conducted and a business case prepared relating to any policy and reporting requirement or target they believe cannot or will not be met and provide evidence of a planned approach to achieving compliance.

To apply for a QGEA exception:

  1. complete the Application for an exception
  2. submit your completed application to qgcio@qgcio.qld.gov.au.

This application requires you to include:

  • evidence of the consequence and likelihood of impact both to the government body and whole-of-government directions from non-compliance
  • details of any remedial action proposed to address inconsistencies with the government body and whole-of-government directions arising from the exception being approved, and assurance that a business case has been endorsed by the department Chief Information Officer (CIO) or relevant executive outlining the benefits derived from granting the exception
  • nominate a timeframe in which the department expects to become compliant
  • authorisation from the agency CIO or relevant executive for the QGEA exception application acknowledging that the government body has a planned approach to achieve compliance in the timeframe requested.

More information on this process can be found in the QGEA exception guideline.

Planning for QGEA alignment

The QGEA implementation prioritisation technique was developed to assist Queensland Government bodies in prioritising their implementation of QGEA policies. While all QGEA policies are mandatory, the technique demonstrates how government bodies could prioritise their QGEA implementation..

Government bodies are not required to use the technique and may have alternative methods for planning the implementation of the QGEA (e.g. risk assessment).

QGEA self-assessment alignment reporting

Previously government bodies reported their self-assessed alignment with the QGEA on an annual basis. With the repeal of the QGEA alignment policy, this is no longer the case. This does not imply that government bodies are no longer required to align with QGEA requirements.

Government bodies should continue to assess their alignment with the QGEA as part of ongoing business improvement, managing digital and ICT risks, guiding digital and ICT investments and supporting operational decision making.

Resources


Last Reviewed: 13 November 2019