ASIO Technical Note
Minimum guidelines for developing security zones in line with the PSPF.
Contact the Manager, Protective Security at DPC
Class A container
Protects information that has an extreme or catastrophic business impact level in situations assessed as high risk. These containers can be extremely heavy and may not be suitable in some facilities with limited floor loadings.
Class B container
Protects information that has an extreme or catastrophic business impact level in situations assessed as low risk.
They are also used for information that has a high or extreme business impact level in situations assessed as higher risk.
These containers are robust filing cabinets or compactuses fitted with combination locks. Class B container size and weight needs to be considered when selecting a location.
Class C container
Protects information up to an extreme business impact level in situations assessed as low risk. They are also used for information that has a medium business impact level in situations assessed as higher risk by the entity.
These containers are fitted with a SCEC-approved restricted keyed lock and are of similar construction to the lighter Class B containers.
Classified information
Material that a government body deems to be sensitive information that must be protected. Access is restricted by law or regulation to particular groups of people with the necessary security clearance and official need to know.
In this guide, references to classified information refer to handling PROTECTED, SECRET and TOP SECRET security classified information.
Clearance holder
Also called candidate or clearance subject. Sometimes depends on the status of the clearance.
Handing classified information
This guide uses various terms for accessing or handling security classified information.
Unless otherwise stated, handling security classified material or information includes to create, listen to, discuss, read, use, handle, access, store or dispose of security classified information.
Handling security classified material includes dealing with print, electronic and broadcast media, in all stages of its lifecycle, including generation, dissemination, storage and disposal.
National interest
The claims, objectives, goals, demands and interests which a nation/state always tries to preserve, protect, defend and secure in relations with other nations.
Protective Security Policy Framework (PSPF)
The PSPF(opens in a new window) assists government entities to protect their people, information and assets and provides guidance to support the effective implementation of the policy across the domains of security governance, personnel security, physical security and information security.
For material that has been generated by the Commonwealth, or that has a national interest apply the PSPF principles apply.
The PSPF is the national standard and should be used when there is any doubt over which Framework is applicable. The information in this guide is based on the PSPF.
Safes and vaults
Commercial safes and vaults provide a level of protection against forced entry. A vault is a secure space that is generally built in place and is normally larger than a safe.
A safe is normally smaller than a vault and may be moveable. Safes and vaults provide varying degrees of protection depending on the construction and may be used to store valuable physical assets.
Security container
A storage container for sensitive or security classified information or assets approved by the Security Construction and Equipment Committee. In this context, usually a Class B or Class C cabinet (filing cabinet, cupboard or similar).
Carries a different level of protection than a commercial safe or vault.
Security Construction and Equipment Committee (SCEC)
SCEC(opens in a new window) is a standing inter-departmental committee responsible for the evaluation of security equipment for use by Australian Government departments and agencies.
Victorian Protective Data Security Framework (VPDSF)
The VPDSF(opens in a new window) provides direction to VPS agencies or bodies on their data security obligations.
It may be used for material that has been generated at the State level.
Victorian Public Sector (VPS)
The VPS(opens in a new window) comprises the Victorian Public Service (Departments, Administrative Offices and Victorian Public Sector Commission) and Victorian Public Entities (Public Health Sector, Government Schools, TAFEs and other educational entities, Police and Emergency Services, Water and Land Management, and Arts, Finance, and Transport).
Updated