Completing a Health Sector Cyber assessment

Overview

You’ll be asked to respond to ‘Topics’ that relate to specific controls in each assessment framework.

Each topic contains a varying number of ‘Requirements’ divided into the three maturity levels: Maturity Level 1 (ML1), Maturity Level 2 (ML2) and Maturity Level 3 (ML3).

To complete the assessment, respond to questions in each of the requirements.

Completing topics

1. Each requirement has descriptions and question sets
2. The assessment navigation menu is on the left. Scroll through to see the list of topics.
3. The notice board on the right contains topic explanations. Scroll down to read all information including measurements and documentation.
4. Each requirement has three sections:
  a. Question set – select most appropriate answer.
  b. Assessment of residual risk – click dropdown box to see options.
  c. Comments – free text section.
5. Move through requirements by clicking blue arrows or selecting on the navigation menu.
Notes:
- You don’t need to attach evidence to this assessment. However, any evidence available to Digital Health on request may be listed in comments section.
- If you need to answer a question later, use the ‘Flag to remember’ checkbox.
- For more information hover over info icons
or
Data from the Health Sector CSA informs your completion of the Victorian Government Cyber Maturity Benchmark if it applies to your organisation. The topic summary page is an essential part of completing your Health Sector CSA.
The topic summary page can be accessed through your assessment overview page.
Alternatively, after you enter your assessment, you can also access the topic summary page through the navigation bar situated on the left had side of your assessment page.
In the topic summary page (below), you can provide responses for your desired maturity level, coverage and assurance for Essential Eight. All other responses are automatically generated based on answers provided in your assessment.

On this page

Overview

Completing topics

Generating reports