For Melbourne health, education, superannuation and Victorian Government organisations and their suppliers: cloud migration in the AWS and Azure Melbourne regions, VPDSS-aligned security, and senior engineering teams.
In short: Melbourne organisations can now keep primary workloads and disaster recovery inside Australia, using the AWS Asia Pacific (Melbourne) region (three availability zones, IRAP-assessed at PROTECTED) and Azure Australia Southeast alongside Sydney. If you work with the Victorian public sector, the Victorian Protective Data Security Standards (VPDSS) reach you too: agencies must make sure their contracted service providers don't breach them.
Issued under the Privacy and Data Protection Act 2014 (Vic). Public sector bodies must apply risk-based security across governance, information, personnel, ICT and physical security.
Agency heads attest that contracted service providers handling public sector information don't contravene the Standards, so suppliers are routinely assessed.
Agencies submit a Protective Data Security Plan and attestation to OVIC every two years, and notify incidents affecting information rated BIL 2 or higher.
Victorian health service providers must also meet the Health Privacy Principles when collecting, storing and sharing health information.
Melbourne's superannuation trustees fall under CPS 230 and CPS 234, including registers of material service providers.
Private businesses covered by the Privacy Act 1988 must assess suspected breaches within 30 days and notify the OAIC of eligible breaches.
Primary workloads in AWS Melbourne (ap-southeast-4), Azure Australia Southeast or Google Cloud australia-southeast2, with Sydney as an in-country DR region.
Cloud & DevOps →Security risk assessments, control uplift and evidence that helps you pass Victorian Government supplier reviews.
Cyber security →Automated regression, accessibility and performance testing for patient, student and member-facing systems.
Software testing →