Reporting requirements

Many QGEA policies contain specific reporting requirements. These can be found in each individual QGEA policy where reporting is required. The table below outlines the current reporting requirements within QGEA documents.

Who do the reporting requirements apply to?

This is specified in each policy document. However generally reporting will apply only to departments and for government bodies in scope of specific policies with broader applicability. For more information see the Applicability of the QGEA.

Policy name

Requirement

Date

ICT resources strategic planning policy

The reporting requirements submitted as per the current QGEA ICT profiling standard (Queensland Government employees only).

The draft or endorsed ICT initiatives and activities submitted as part of their work plan and as per the current QGEA ICT profiling standard (Queensland Government employees only).

As per ICT profiling standard

As per ICT profiling standard

ICT SME participation scheme policy

Departments must report awards made to SMEs in the ICT industry providing innovative solutions up to the value of $500,000 (inclusive of GST). In order to assess the benefits of this change to the SME Scheme the following information is required:

  • Date of award
  • Total value of award
  • SME status
  • Overview of the solution
  • Key business benefit of the delivered solution

Quarterly - March, June, September, December

Information governance policy

Provide the department’s/Queensland Government ICT service provider’s draft or endorsed information management initiatives.

For further information please see the QGEA ICT profiling standard (government employees only) and the Work plan template.

Supporting guidance is available in the Information management work plan guideline.

31 July every year

Information security policy (IS18:2018)

1 (a) For the financial year ending 30 June 2019:

  • Agencies must submit an Information security annual return that has   been endorsed by the agency's accountable officer to the Queensland   Government Chief Information Office.
  • Agency accountable officers must submit a letter of attestation to the   Queensland Government Chief Information Officer

30 October 2019

1 (b) From 2020, for each financial year ending 30 June:

  • Agencies must submit an Information security annual return that has   been endorsed by the agency's accountable officer to the Queensland   Government Chief Information Office.
  • Agency accountable officers must submit a letter of attestation to the   Queensland Government Chief Information Officer
From 2020 - annual at 30 September

2 Communicate incident response activities and threat intelligence to the Queensland Government Chief Information Office Virtual Response Team as per the QGEA Information security incident reporting standard.

Ongoing

Last Reviewed: 05 September 2019