Reporting requirements

The reporting requirements submitted as per the current QGEA ICT profiling standard (Queensland Government employees only).

The draft or endorsed ICT initiatives and activities submitted as part of their work plan and as per the current QGEA ICT profiling standard (Queensland Government employees only).

As per ICT profiling standard

As per ICT profiling standard

Departments must report awards made to SMEs in the ICT industry providing innovative solutions up to the value of $500,000 (inclusive of GST). In order to assess the benefits of this change to the SME Scheme the following information is required:

• Date of award
• Total value of award
• SME status
• Overview of the solution
• Key business benefit of the delivered solution

Quarterly - March, June, September, December

Provide the department’s/Queensland Government ICT service provider’s draft or endorsed information management initiatives.

For further information please see the QGEA ICT profiling standard (government employees only) and the Work plan template.

Supporting guidance is available in the Information management work plan guideline.

31 July every year

1 (a) For the financial year ending 30 June 2019:

• Agencies must submit an Information security annual return that has   been endorsed by the agency's accountable officer to the Queensland   Government Chief Information Office.
• Agency accountable officers must submit a letter of attestation to the   Queensland Government Chief Information Officer

30 October 2019

1 (b) From 2020, for each financial year ending 30 June:

• Agencies must submit an Information security annual return that has   been endorsed by the agency's accountable officer to the Queensland   Government Chief Information Office.
• Agency accountable officers must submit a letter of attestation to the   Queensland Government Chief Information Officer

2 Communicate incident response activities and threat intelligence to the Queensland Government Chief Information Office Virtual Response Team as per the QGEA Information security incident reporting standard.