Victorian Government strengthens cybersecurity with new deal

The Victorian Government has enlisted the services of Sparx Solutions in partnership with ProcessUnity to oversee third-party risk management as part of its Cyber Security State Purchase Contract.

The competitive tender process led to the selection of Sparx Solutions, recognised for its track record in providing technology services across various sectors, and ProcessUnity, known for risk and cybersecurity management solutions. This collaboration aims to bolster the cybersecurity posture of Victorian government entities through enhanced third-party risk assessments.

Under this contract, effective since May 2024 and operational on the Victorian Government's Digital Marketplace since the previous September, Sparx Solutions and ProcessUnity will deliver third-party risk management services to government departments and agencies within Victoria. These services are intended to ensure adherence to stringent data usage regulations and guidelines.

The initiative will allow government entities to evaluate third-party vendors' security controls and risk exposure utilising threat intelligence integration, thereby facilitating secure sharing and assessment of third-party risk information among agencies.

The contract encompasses capabilities such as 'live threat' intelligence alerts which support continuous assessment protocols, thus enhancing the notification process related to potential security threats.

Mario Antoniou, Executive Director of Sparx Solutions, commented, "As a Victorian, I'm excited and humbled for Sparx to play a leading role in helping ensure the safety and security of important data for Victorians by providing services in this panel, with our partner, ProcessUnity. Previously these services were provided on a bespoke basis to the specific agency. However, this is a Victorian wide approach to third party risk management, which includes highly secure sharing of the risk profile of third parties dealing with Victorian Government between agencies. This saves OFFICIAL time, reduces risk, and ultimately protects agencies from third party risks – an issue which has become more prevalent in recent years around data protection."

Anthony Panuccio, VP APAC of ProcessUnity, stated, "We are delighted to be working closely with the Victorian Government, cyber strengthening their supply chain. To do this with Sparx Solutions, who have a long and successful relationship with the Victorian Government, will ensure we are delivering against the desired outcomes of the TPRM uplift project. With most of the breaches occurring through third parties, a progressive modern approach is required to uplift every third party's cyber maturity and coverage."

The third-party risk management approach by the Victorian Government seeks to streamline efforts across various agencies and reduce the risk associated with third-party interactions, which have increasingly become significant sources of data protection challenges.