About the PSR
This overview of Protective Security Requirements (the PSR) outlines the government’s expectations for security governance and for personnel, information, and physical security.
Overview of the Protective Security Requirements
The PSR is a policy framework that sets out what your organisation must do to manage security effectively. It also contains best practice guidance you should consider following. The PSR is suitable for both public and private sector organisations.
Effective security enables New Zealand organisations to work together securely in an environment of trust and confidence. Protecting your people, information, and assets helps your organisation to meet its strategic and operational objectives.
Who this overview is for
This overview is for:
- organisation heads
- security management staff
- contractors who provide protective security advice and services
- anyone involved with the security of New Zealand Government personnel, information, and physical assets.
What this overview covers
This overview covers the PSR's core policies and mandatory requirements. It gives information on:
- defining governance and management structures for security
- identifying security risks and needs for personnel, information, and physical security
- complying with the PSR's mandatory requirements.
The PSR’s core policies cover four key areas: security governance, personnel security, information security, and physical security.
New Zealand's policy framework for protective security has four tiers and a hierarchical structure.
The PSR describes when your organisation needs to consider specific security measures to comply with mandatory requirements.
The PSR contains eight governance requirements which work together to ensure effective oversight and management of all security areas.
To protect government-held resources, your organisation must ensure that access to information and assets is only given to suitable people.
The New Zealand Government collects and receives information to fulfil its functions and expects all those who hold or access this information to protect it.
Every New Zealand Government organisation must have physical security measures in place to protect people, information, and assets.