Register to Follow SSIP Hub
View all Hubs Back

CHSP Provider Hub

Updates & Resources

  • DEX Governance - Cyber security

    The Australian Cyber Security Centre (ACSC) recommends organisations should implement a plan for all users and computers storing sensitive information. The ACSC has developed some strategies to help organisations protect themselves against various cyber threats which can be found on their website.

    If your organisation becomes aware of any security or privacy breaches you must notify your Funding Arrangement Manager as soon as possible, even if you do not believe it impacts the Data Exchange. For further information, please refer to the Data Exchange Protocols.

    Keeping your myID secure

    Digital ID is the Department of Social Services’ preferred, secure way to log into the Data Exchange. When signing in with Digital ID, your organisation needs to be registered with Relationship Authorisation Manager (RAM). MyID is the Digital ID account that organisation users need to access the Data Exchange.
    Users are responsible for keeping their myID safe. The Australian Taxation Office (ATO) that manages myID, provides the following advice:

    • Use a personal email address when setting up your myID - This ensures only you have ongoing access. You can update your email address in the myID app anytime.
    • Protect your personal email account - Use strong and secure passwords and multifactor authentication.
    • Don't share your myID, provide your log in code or enter your log in code for anyone -Sharing provides others with access to your personal data across online services.
    • Protect your identity documents - Avoid storing images of identity documents in emails and be mindful who you share these with. If you have sent these over email (for example to a bank) make sure you delete them from your sent items.
    • Keep your smart devices secure - Enable built-in security features in your device such as fingerprint or face, and don't leave your devices unattended. If your device is lost or stolen, report it straight away.
    • Check your myID setup history regularly - You can view a summary of each time your myID has been set up.
    • Stay on top of your cyber hygiene - Run software updates and keep antivirus software up-to-date. Always be careful when clicking on links and providing personal identifying information.
    • Report suspected inappropriate access - If you suspect someone has inappropriately accessed your personal information in myID, report it straight away.

    To discuss other options for accessing the Data Exchange, please email the Helpdesk - [email protected].

    Cyber Security Incidents and the Data Breaches
    Organisations are responsible for implementing processes and controls to protect Data Exchange information from unauthorised access. Organisations must notify their funding agency as soon as practical if they become aware of an actual (or possible) cyber security incident and/or data breach. According to the Australian Cyber Security Centre’s (ACSC) Guidelines for Cyber Security Incidents, a Cyber Security incident is: A cyber security incident is an unwanted or unexpected cyber security event, or a series of such events, that either has compromised business operations or has a significant probability of compromising business operations.

    Organisations should have processes and controls in place to prevent and manage cyber security incidents for the Data Exchange. The following resources may assist organisations in meeting their Data Exchange cyber security responsibilities: According to the Office of the Australian Information Commissioner (OAIC): A data breach happens when personal information is accessed, disclosed without authorisation, or is lost.

    Should a client’s personal information in the Data Exchange be shared with or accessed by an unauthorised person, this constitutes a data breach under the Privacy Act 1988. A data breach may occur as part of a cyber security incident. Organisations should have processes and controls in place to prevent and manage data breaches for the Data Exchange. For example, Office of the Australian Information Commissioner’s (OAIC) Protecting customers' personal information recommends organisations:
    • have personal information handing processes and procedures, and ensure staff undertake regular privacy training
    • ensure staff access personal information on a need-to-know basis
    • have policies on information security, including ICT security, physical security and access security take care when handling sensitive information
    • have a data breach response plan.
    The following OAIC resources at https://www.oaic.gov.au/privacy/ may assist organisations in meeting their Data Exchange privacy and data breach responsibilities:
    Category : BUSINESS, GOVERNANCE
    Created On :  19 October 2026

Subscribe to Newsletter

  • Reform updates, training & resources in your inbox once a month
    COTA Queensland CHSP Provider Update

COTA Queensland SSD Team

  • Sherryn Davies
    Community & Stakeholder Engagement
    COTA Queensland

Webinars & Events

Training & Events

All times shown are Queensland time (AEST).
For interstate events, reminders & calendar invites may display in the local event time.

View all

Useful Links

Our Child Safety Policy

COTA Queensland’s Sector Support and Development team believes every child has the right to be safe, to feel safe and to be protected from harm.

Guided by our organisation’s safeguarding framework, our team has completed a structured risk assessment of our sector-facing activities and undertaken targeted training to strengthen our ability to prevent, identify and respond to child abuse.

We are committed to acting promptly and appropriately if concerns are raised or disclosures occur, and to supporting safe practices across the sector.