Client: Australian Electoral Commission

What: Enterprise-wide core business security risk assessment

Linked to: Enterprise security risk assessment and evaluation

Board and Executive level security governance and reporting

Ahead of the 2024/25 Federal Election, the AEC sought to understand its risk profile in relation to their core business while examining options to mitigate risks ahead of an election event. Providence Consulting Group Pty Ltd was engaged to undertake this assessment and provide these strategies to mitigate. This is an ongoing engagement; to date Providence has provided a baseline assessment for the organisation in steady-state operations. As the engagement progresses, the team will guide the establishment of scalable security measures to operate effectively in a heightened threat/risk context during and post-election. Moreover, Providence has provided the AEC with heightened assurance through our approach to governance ensuring that decisions on security and mitigations are defensible.

Providence worked with the Australian Electoral Commission (AEC) to modernise their protective security in alignment with the Commonwealth Protective Security Policy Framework (PSPF). By leveraging expertise in security risk management and protective security governance, Providence developed key artefacts including the Agency Security Plan, Security Risk Management Framework, and an Agency Alert Level System.

Providence conducted national physical security site surveys, assessing risk profiles for each location, and engaged extensively with AEC executives to ensure alignment on security priorities.

The project enabled the AEC’s leadership to gain clear visibility of its security risk posture and maturity. Providence also developed a prioritised plan for security upgrades, providing guidance on governance and protective security measures. Additionally, Providence established an organisational structure to consistently manage security risks and ensure the AEC’s protective security objectives were met.