Resources

References

References to external standards, information, and guidance that may be useful to organisations implementing the Protective Security Requirements (PSR)

Security Governance References

Reference

PSR Ref

Purpose

ISO 31000 Risk management GOV 2 ISO standard for risk management
Business continuity and disaster recovery (nzism.govt.nz)(external link) GOV 3 Information on business continuity and disaster recovery relating specifical to information technology systems
ISO 22301- Security and resilience – Business continuity management systems – Requirements GOV 3 ISO standards for business continuity management systems

Supporting standards cover specific components of the business continuity management programme:

  • ISO 22313 Business continuity management systems – Guidance
  • ISO 22316 Organisational resilience – principles and attributes
  • ISO 22317 BCMS – Guidelines for business impact analysis
  • ISO 22318 BCMS – Guidelines for supply chain continuity
  • ISO 22330 BCMS – Guidelines for people aspects of business continuity
  • ISO 22331 BCMS – Guidelines for business continuity strategy
  • ISO 22398 – Guidelines for exercises.
GOV 3 ISO standards for business continuity management systems
New Zealand Government Rules for Procurement (procurement.govt.nz)(external link) GOV 5 New Zealand Government Procurement Rules
Tackling security risk in government supply chain (security.gov.uk)(external link) GOV 5 UK Government guidance for managing security risks in the commercial environment
Incident Management: Be Resilient, Be Prepared (ncsc.govt.nz)(external link) GOV 6 NCSC guidance on establishing an incident management capability
New Zealand Government Cabinet Manual (dpmc.govt.nz)(external link) GOV 6 Covers the security and handling of Cabinet documents
National Emergency Management Agency (civildefence.govt.nz)(external link) GOV 3, GOV 7 Covers information on New Zealand’s civil defence and emergency management system
National Security – National terrorism threat level (dpmc.govt.nz)(external link) GOV 7 Defines the current national terrorism threat level and provides information on the roles and responsibilities during a national threat.

Personnel Security References

Resource Purpose
Workforce Assurance Model Standard (publicservice.govt.nz)(external link) Public Service Commission’s standard outlining expectations for government organisations when recruiting staff, investigating serious misconduct, and use of settlement agreements
Identification Standards (digital.govt.nz)(external link) Department of Internal Affair’s standard for verifying an individual’s identification
VisaView (immigration.govt.nz)(external link) Immigration New Zealand’s system for tracking immigrant’s visa status
Public Service Integrity and Conduction (publicservice.govt.nz)(external link) Public Service Commission’s code of conduct for public servants
Criminal record check (justice.govt.nz)(external link) Ministry of Justice Criminal record check
Criminal records checks for overseas applicants (gov.uk)(external link) UK Government guidance on processes for checking overseas applicants criminal records (by country)
Eliminating all forms of bias and discrimination in recruitment processes (publicservice.govt.nz)(external link) Public Service Commission’s guidance for steps organisations can take to eliminate bias and discrimination in recruitment
Occupation registration requirements (immigration.govt.nz)(external link) Immigration NZ’s lists requirements for qualifications required for specific occupations
Recognising overseas qualifications (nzqa.govt.nz)(external link) NZQA guidance for which qualifications have been recognised and how to get overseas qualifications recognised by NZQA
The New Zealand Police Vetting Service (police.govt.nz)(external link) The New Zealand Police Vetting Service information

Information Security References

Resource Purpose
Cyber security framework (ncsc.govt.nz)(external link) Interrelated cyber security functions and outcomes to mitigate cyber security risks
New Zealand Information Security Manual (nzism.gcsb.govt.nz)(external link) Details processes and controls essential for the protection of New Zealand Government information and systems
NCSC Information Security Guidance (ncsc.govt.nz)(external link) Guidance on practices to use to manage specific information security scenarios
New Zealand Government Information Security Classification System New Zealand Government classification system for classifying information and managing information security risks
Health information security framework (tewhatuora.govt.nz)(external link) Protection for health information (personally identifiable health information)
Privacy Commissioner requirements (privacy.org.nz)(external link) Requirements for ensuring compliance with New Zealand’s Privacy Act
Information and Records Management Standard (archives.govt.nz)(external link) Requirements for managing information and records in the New Zealand Government
Risk management advice and resources (digital.govt.nz)(external link) New Zealand Government information risk management guidance
Risk assessment for public cloud services (digital.govt.nz)(external link)
NIST Cybersecurity framework (nist.gov)(external link) Comprehensive identification of security controls
ISO 27001 (iso.org)(external link) Build and maintain an information security management system for information security, cybersecurity, and privacy protection
PCI DSS (pcisecuritystandards.org)(external link) Protection of payment data

Physical Security References

Standards

Australian and New Zealand Standards (AS and NZS)

AS/NZS 2343:1997 Bullet–resistant panels and elements (under review)

AS/NZS 3016:2002 Electrical installations – Electric security fences (under review)

AS/NZS 2201.5:2008 Intruder alarm systems – Alarm transmission systems

AS/NZS 2201.1:2007 Intruder alarm systems – Client's premises– Design, installation, commissioning and maintenance

AS 2201.3:1991 Intruder alarm systems – Detection devices for internal use

AS 2201.2:2022 Intruder alarm systems – Monitoring centres

AS 4145.2:2008 Locksets and hardware for doors and windows – Mechanical locksets for doors and windows in buildings

AS/NZS ISO 45001:2018 Occupational health and safety management systems – Requirements with guidance for use

AS/NZS IEC 60839–11–1:2019 Electronic access control systems – System components requirements (Part 11–1)

AS/NZS IEC 60839–11–1:2019 Electronic access control systems – Application guidelines (Part 11–2)

AS3555.1–2003 Building Elements – Testing and Rating For Intruder Resistance Intruder–Resistant Panels

AS HB 328:2009 Mailroom Security

British Standards (BS)

BS EN 1143–1:2019 Secure storage units. Requirements, classifications and methods of test for resistance to burglary. Secure safe cabinets

BS 1722–14:2016 Fences – Specification for open mesh steel panel fences

BS 1722–12:2016 Fences – Specification for steel palisade fences

En50131–2–2:2021 Requirements for passive infrared detectors

Din 699 Shredders

International Organization for Standardization (ISO)

ISO 22343–1:2023 Security and resilience – Vehicle security barriers – Part 1: Performance requirement, vehicle impact test method and performance rating

ISO 22343–2:2023 Security and resilience – Vehicle security barriers – Part 2: Application

ISO 31000:2018 Risk management – Guidelines

Japanese Industrial Standard (JIS)

JIS S 1037 – Fire proof safe testing standard

UL Standards

UL 72 – Tests for fire resistance of records protection equipment

UL 687 – Burglary–resistant safes

UL 768 – Combination Locks

UL 634 – Standard for Connectors and Switches for Us with Burglar–Alarm Systems

Handbooks/Guides

New Zealand Government Property Group Guidance and Workplace design

HB 167:2006 Security risk management

HB 327:2010 Communicating and Consulting About Risk

Designing out Crime: Crime Prevention Through Environmental Design

IES–G–1–16 Guideline on Security Lighting for People, Property, and Public Spaces

Privacy and CCTV: A guide to the Privacy Act for businesses, agencies and organisations

New Zealand Information Security Manual (NZISM)

National guidelines for crime prevention through environmental design in New Zealand

Designing out crime

Codes

The New Zealand Building Code

Guidance for constructing PSR security zones

The following protectively–marked material will guide you on the construction and security of PSR Security Zones. Contact the PSR team for more information.

NZSIS Approved Products List (APL)

NZSIS Technical Note – Class A Secure Room

NZSIS Technical Note – Class B Secure Room

NZSIS Technical Note – Class C Secure Room

NZSIS Technical Note – Physical Security of Intruder Resistant Areas

NZSIS Technical Note – Physical Security of Secure Areas

NZSIS Technical Note – Physical Security of Zone 5 Areas