Listing of Penske Security policies, procedures and other documents

Listing of Penske Security policies, procedures and other documents

This page provides a listing of all Penske Australia & New Zealand security-related policies, procedures, and other documents.


Document
Purpose
G.COR03.005 Security Incident Reporting Procedure
How to report security incidents, risks and threats
G.COR03.100 Data Breach Response Plan
Provides the process for handling a data breach
G.IT01.001 Event Logging Policy
The event logging policy for IT systems and applications
G.IT01.002 Security Policy for System Owners
The policy relating to system owners
G.IT01.003 Data Transfer Audit Policy
Policy for auditing of data transfers in and out of Penske
G.IT01.004 Digital Preservation Policy
The policy for retaining digital data in Penske
G.IT01.005 ICT Equipment Sanitisation Policy
Policy for the sanitisation (erasure or destruction) of IT equipment
G.IT01.006 Cryptography Policy
The approved cryptographic algorithms and ciphers for use within Penske
G.IT01.007 IT Usage Policy for PROTECTED Networks
Acceptable usage policy for users of the PROTECTED network
G.IT01.008 Intrusion Detection and Prevention Policy
Policy for configuration and existence of IDS and IPS
G.IT01.009 Data Classification Policy
The policy for Data Classification of documents and emails
G.IT01.010 Computer and Software Policy
Policy for use of computers and software in Penske
G.IT01.011 Mobile Device Usage Policy
Policy for use of mobile devices (phones, tablets) in Penske
G.IT01.012 Third Party Information Security Risk Management Policy
Managing risks for third party IT suppliers
G.IT01.100 IT Usage Policy
Acceptable usage policy for all Penske staff using IT equipment and services
G.IT02.001 Information Security Overview
An information security statement that can be shared to external parties
G.IT02.002 Data Backup and Replication Process
Process for backing up data and replicating data for disaster recovery
G.IT02.003 Data Restoration Process
The process for restoring data from backups
G.IT02.004 Patch Management Process
The process for patching computers and servers
G.IT02.005 Vulnerability Management Process
The process for managing vulnerabilities on IT assets
G.IT02.006 Data Classification Process and Controls
How to classify documents and emails
G.IT03.001 Data Import and Export Audit Procedure
How to audit the importing and exporting of data
G.IT03.010 IT Policy and Procedure Manual
IT's procedures for various activities
G.IT03.021 IT Incident Response Plan
Details the process for managing a major IT incident



    • Related Articles

    • Overview of Penske's Information Security

      The attached document was created as an overview of Penske Australia & New Zealand's Information Security (InfoSec/Cyber Security) that can be provided to external parties as needed, such as during tenders and contract negotiations, or to provide a ...

    • I got my security clearance, now what?

      If you just received your security clearance, first of all congratulations on getting through a likely tedious and lengthy process. But now that you have your security clearance, what does this mean and what are your ongoing obligations? Your ...

    • Penske Cyber Security Strategy 2023-2025

      Please find attached Cyber Secuity Strategy document for Penske Australia & New Zealand for 2023-2025.

    • Security cameras (CCTV) used within Penske

      Penske Australia & New Zealand has selected Cisco Meraki cameras as the standard camera to use across all locations as needed. Cisco Meraki cameras are approved for use on the network and for remote viewing. The different models of cameras can be ...

    • Obtaining a Defence security clearance

      Requesting a Defence security clearance can be done using the New Ticket form with the "Request a Security Clearance" layout option on the form. However, it is important to note the following requirements for requesting a clearance. The applicant ...