This Strategic Working Group (SWG) meeting was held via webinar on 9 March 2022.
The agenda is available in the table below.
Participation is available to those Digital service providers listed as SWG members for the 2022 year.
At this meeting the discussion points were:
The SWG Charter has been updated following the recent SWG membership refresh - there were no major changes.
New Zealand Digital Advisory Group (DAG)
The New Zealand Digital Advisory Group (DAG) set up by the New Zealand IRD is proving to be a valued forum as it continues to progress. The purpose and charter for the group are available on the DSPANZ website.
MBR program of work
The Treasury consultation paper on registry fees consultation paper produced no specific findings, however of particular interest, was the ‘Infrastructure fee’ which would replace the current search fee.
Cyber Security Landscape
API risk ratings
An overview was given of the draft API risk rating document, with changes to the current version supporting the addition of new APIs for MBR. The main discussion points included concerns around when an API may be considered high risk:
- the number of transactions
- if a fee is associated with the use of the API
- registering a new form compared to changing details on the same form.
ATO’s Cyber security program
An update was provided on the ATO’s cyber security program and broader landscape, including discussion on:
- Vulnerability management tool.
- Privilege access management tool.
The broader ATO cyber program is working towards achieving ACSC maturity level 3 in the production environment by 2024.
Supply chain risk management
Discussion was held around the ATO’s annual reporting against the Protective Security Policy Framework (PSPF) - managing supply chain risk when engaging third party service providers and the use of the IT Security Awareness & Diagnostic Tool is used by the ATO to assess cyber risk.
Updates have been made to the DSP roadmap to reflect the current status of all ATO initiatives, including those placed on hold due to changing business priorities.
Current ATO priorities
The ATO’s shifting priorities and re-plan that took place at the end of 2021 was discussed – priorities Strategic direction was provided noting the ATO will continue to drive more alignment between business priorities and technology investment and strategic initiatives, with continuing improvements through the use of data.
Digital services gateway (DSG)
Updates were provided on the progress of the DSG: The API Portal is ready for testing, user sessions are underway and work is has commenced on the next round of priority services.
DPO Engagement model
The engagement model has been updated to reflect the current working groups – feedback is welcome.
Key outcomes and presentations are available by logging in to Online Services for DSPs.
The secretariat of the Strategic Working Group can be contacted by email at DPO@ato.gov.au.
No previous versions available.