The Australian Government has released the Industry Data Classification Framework (IDCF). This framework will help Australian organisations to classify, protect and share data.
The IDCF is a voluntary tool to support organisations to:
- identify and classify data consistently
- better understand and communicate data-related risk
- apply proportionate controls based on data value and sensitivity
- strengthen cyber security
- strengthen data governance practices
- improve information sharing
- improve interoperability across organisations.
The IDCF and supporting guidance are now available through the dedicated
IDCF website.
For an overview of the framework, see
IDCF on a page.
Overview
This work is a key initiative under the
2023-2030 Australian Cyber Security Strategy (the Strategy).
The department worked with Australia's national science agency, CSIRO, to develop a voluntary data classification framework for Australian organisations. This was in response to industry feedback calling for a common approach to data classification. At the time, organisations lacked a standardised system for assessing and classifying their data.
The department and CSIRO developed the framework through research and consultation with:
- Australian businesses
- industry bodies
- peak organisations
- government agencies.
Stakeholders emphasised the need for a practical and interoperable framework. The framework supports consistent data classification and handling across organisations.
The IDCF is the final version of the project previously known as the Voluntary Data Classification Framework (VDCF).
