Home › Resources › Governance › The Protective Security Policy Framework (PSPF)

The Protective Security Policy Framework (PSPF)

The PSPF sets protective security policy for government. It complements the ISM and shapes how government entities handle information and access.

Why it matters

For government entities the PSPF frames obligations around information classification and personnel security that sit alongside the technical strategies.

How Conformance helps

  • Understand which PSPF expectations apply to your organisation
  • Align information handling with classification requirements
  • Connect personnel and physical security to your controls
  • Keep governance roles and responsibilities clear
  • Document how PSPF and ISM obligations are met
How Conformance helps

Conformance validates this strategy from the evidence your organisation already produces, shows your maturity level, and tells you the next step to raise it.

Official guidance: the Protective Security Policy Framework (PSPF)