Customer Support Division | Tech Journal

As our world becomes increasingly digitized, the threat of malicious cyber activity continues to rise. The Department of Customer Service, New South Wales Government, is leading the charge in addressing these challenges, enhancing its cybersecurity capabilities to protect critical information and services for over eight million residents across New South Wales.

Under the guidance of Chief Information Security Officer (CISO) Sam Mackay, DCS has embarked on a comprehensive journey to establish a world-class cybersecurity function. This government body, responsible for delivering customer service, digital transformation, and regulatory reform, is dedicated to safeguarding the data and systems that support its operations.

DCS is the key government agency that facilitates interaction between citizens and government services. As the public’s gateway to these services, it was established to provide easy access and place the people of NSW at the heart of service delivery. The department has also emerged as a leader in digital products and services, being the first in Australia to issue digital driver’s licenses and setting a precedent for digital identities worldwide.

“When you can actually see the work your department and the agencies within it are delivering, you know you’re making a difference,” Sam begins.

A strategic vision for cybersecurity 

DCS is committed to developing a world-class cybersecurity function that not only addresses the current cyber threat landscape but also anticipates and mitigates emerging risks. This vision aligns with the broader Australian goal of becoming a global leader in cybersecurity by 2030, as outlined in the 2023-2030 Australian Cyber Security Strategy. The DCS security strategy emphasizes the importance of building strong defenses, protecting critical infrastructure, and enhancing threat detection and response capabilities nationwide. To achieve its vision, DCS is focusing on these key areas:

• Strengthening cyber resilience: DCS aims to create a robust and resilient cybersecurity framework capable of withstanding evolving cyber threats. This involves implementing advanced security technologies, improving incident response capabilities, and ensuring that all systems and data are protected to the highest security standards.

• Collaboration and coordination: DCS is working closely with Cyber Security NSW and other government entities to align its cybersecurity initiatives with state-wide and national strategies. This collaboration is essential for ensuring a cohesive approach to cybersecurity, prioritizing information sharing and coordinated responses to incidents.

• Leveraging advanced technologies: The department is investing in cutting-edge technologies such as AI and machine learning to enhance its threat detection and response capabilities. These technologies are crucial for enabling NSW DCS to proactively identify and mitigate potential threats, staying ahead of cybercriminals.

• Professionalizing the cyber workforce: A significant aspect of becoming a world-class cybersecurity function involves developing a skilled and capable workforce. DCS is focused on upskilling its cybersecurity teams and fostering a culture of continuous learning to ensure that its staff are prepared to tackle the complexities of modern cyber threats.

By pursuing these strategic priorities, DCS is positioning itself as a leader in the cybersecurity arena, ensuring it not only meets today’s challenges but is also ready to navigate future uncertainties. This approach aligns with the overarching goal of the Australian government to make the country the most cyber-secure nation by 2030.

Prioritizing the protection of the people of NSW 

In an era where digital services are increasingly woven into daily life, the government recognizes the importance of protecting personal information as a fundamental right. This proactive stance highlights that robust cybersecurity measures are essential for maintaining public trust and ensuring that all residents can confidently engage with digital government services.

Sam underscores the critical importance of data protection: “While we continue to digitize, we acknowledge the need to safeguard the data and information we hold. Ongoing investment is vital for building a world-class cybersecurity function. Our mission is to ensure that our systems and services are resilient against any potential threats.”

The focus is on creating a resilient digital environment that allows NSW to lead by example. This forward-thinking approach positions NSW as a proactive leader in the cybersecurity landscape, ensuring the state is prepared for future challenges.

By embedding cybersecurity into its digital strategy, the NSW government sends a clear message: the protection of the people of NSW is paramount. This commitment is not merely financial; it is a pledge to citizens that their government will remain vigilant and relentless in pursuing their digital safety.

Collaboration with Cyber Security NSW

A critical element of DCS’s cybersecurity strategy is its close collaboration with Cyber Security NSW, the state’s dedicated cybersecurity body within DCS. Cyber Security NSW plays a vital role in enhancing the state’s overall cyber resilience by providing centralized leadership, coordination, and support across all NSW government entities.

Cyber Security NSW and the DCS Cyber and Information Security Office work together to align their efforts with state and national strategies. This partnership ensures that NSW’s cybersecurity initiatives adhere to the latest standards and practices, effectively mitigating risks across the state’s digital infrastructure. Together, they focus on areas such as threat intelligence sharing, incident response coordination, and the implementation of state-wide security policies.

Cyber Security NSW provides DCS with valuable resources, including threat intelligence and sector-wide insights and reporting, which are crucial for staying ahead of emerging cyber threats. This collaboration is further supported by state-wide initiatives, such as enforcing Domain-based Message Authentication, Reporting & Conformance (DMARC) across government subdomains, significantly enhancing email security.

Leveraging advanced technologies

DCS is at the forefront of integrating cutting-edge technologies into its cybersecurity operations. The department actively utilizes AI to enhance its threat detection and response capabilities. AI-driven solutions allow for rapid analysis of large datasets, enabling the department to identify and mitigate threats more quickly and efficiently. This technology is particularly valuable in managing the complex security landscape associated with large-scale digital transformation initiatives.

In addition to AI, DCS is advancing its digital identity initiatives. The NSW Digital Identity and Wallet project is a pioneering effort to transform how residents interact with government services. This secure, smartphone-based system allows individuals to verify their identities and credentials easily while ensuring their personal information remains protected.

Partnering for success

To achieve its cybersecurity objectives, after adhering to strict government procurement policies and processes, DCS has partnered with several leading technology providers, each playing a crucial role in enhancing the department’s security capabilities.

• Cloudflare: Cloudflare has been instrumental in bolstering DCS’s network resilience. By leveraging Cloudflare’s global network infrastructure, the department has significantly reduced the risk of Distributed Denial of Service (DDoS) attacks, which are common and disruptive cyber threats. Cloudflare’s Web Application Firewall (WAF) has provided an additional layer of protection by filtering out malicious traffic before it reaches DCS’s web applications, ensuring that only legitimate traffic is allowed through. This has been essential in maintaining the availability and security of DCS’s online and digital services.

• SailPoint: Identity governance is critical in ensuring that the right individuals have access to the right resources at the right times. SailPoint’s Identity Governance and Administration (IGA) platform has enabled DCS to automate and manage identity lifecycle processes efficiently. With SailPoint, the department can enforce strict access controls, manage user identities across various systems, and ensure compliance with internal policies and regulatory requirements. This has been particularly important in managing the complex and dynamic access needs of a large government department.

• Okta: Okta has played a vital role in securing access to DCS’s systems through its identity and access management (IAM) solutions. Okta’s Single Sign-On (SSO) and Multi-Factor Authentication (MFA) capabilities have provided DCS with secure, streamlined access management. By reducing reliance on passwords and implementing MFA, Okta has significantly lowered the risk of unauthorized access due to compromised credentials. Additionally, Okta’s adaptive authentication has enabled DCS to assess risks in real-time, adjusting authentication requirements based on the context of access attempts.

• Pentera: Continuous validation of security posture is crucial in ensuring that defenses remain effective against evolving threats. Pentera’s automated security validation platform has allowed DCS to emulate real-world attack scenarios and continuously test the effectiveness of its security measures. By identifying vulnerabilities and weaknesses in its defenses before attackers can exploit them, DCS can proactively address security gaps and enhance its overall resilience.

• Palo Alto Networks: Palo Alto Networks has been a key partner in strengthening DCS’s network and endpoint security. Through its next-generation firewall (NGFW) and advanced endpoint protection solutions, Palo Alto Networks has provided comprehensive threat prevention capabilities, including protection against malware, exploits, and advanced persistent threats (APTs). The integration of Palo Alto’s cloud security solutions has also enabled DCS to secure its cloud environments, ensuring that data remains protected across all platforms.

These partnerships bring invaluable expertise and advanced technologies, allowing DCS to maintain a proactive and comprehensive cybersecurity strategy.

Looking ahead: A mission to secure the future 

“Our mission is clear,” Sam emphasizes. “It’s about protecting the information and systems the department holds and operates. We are continually adjusting our posture to ensure we’re ready to respond to persistent and emerging threats.”

DCS is committed to continuing its journey toward becoming a world-class cybersecurity function, setting an example for other public sector organizations in effectively protecting and securing digital government services.

Explore the latest edition of Technology Magazine and join the conversation at our global conference series, Tech & AI LIVE.

Discover all our upcoming events and secure your tickets today.

Technology Magazine is a BizClik brand