Policy Review - Cyber Security Policy 2140

At the Ordinary Meeting of 18 August 2026, Oberon Council resolved to place the reviewed Cyber Security Policy on public exhibition for a period of 28 days, commencing 20 August 2026.

Council has undertaken a comprehensive review of the existing policy to ensure it reflects contemporary cyber security governance practices, current NSW local government guidance and Council's evolving cyber security maturity.

Summary of amendments to the policy:

• Transition from an operational cyber security procedure to a governance-focused policy

  document

• Establish contemporary cyber security principles and governance arrangements

• Strengthen accountability across management, staff and contractors

• Introduce a dedicated cyber security risk management framework

• Establish governance requirements for cyber security incident management

• Strengthen business continuity and organisational resilience requirements

• Introduce supplier and third-party cyber security obligations

• Improve alignment with Council's risk management, privacy and information governance
  frameworks

• Remove detailed technical controls from the policy and instead provide for their management
  through supporting operational procedures, standards and plans, and

• Improve readability, structure and long-term maintainability of the policy.
  
  

The report presented to Council and the revised policy are available for download in the Documents tab of this page. Community members are invited to review the updated policy and provide their submissions during the exhibition period.

Public submissions can be made below or sent via email to council@oberon.nsw.gov.au and must be received by the closure of the public exhibition period at 4:30pm on Friday 18 September 2026.