INTERNET 2.0 PTY LIMITED Department of Home Affairs Ransomware targeting framework

Response to this request is long overdue. By law, under all circumstances, Department of Home Affairs should have responded by now (details). You can complain by requesting an internal review.

Dear Department of Home Affairs,

I would like all available documents relating to the procurement detailed below. This includes justification as to why this was a limited tender, the decision maker who signed off on the procurement and the outcomes of the procurement (results delivered).

CN ID: CN3937378
Agency: Department of Home Affairs
Publish Date: 23-Dec-2022
Category: Research programs
Contract Period: 19-Oct-2022 to 18-Nov-2022
Contract Value (AUD): $338,580.00
Description: Ransomware targeting framework
Procurement Method: Limited tender
Limited Tender Exemption: App A: 6. Research and development services (but not inputs).
ATM ID: PRN0008310
Confidentiality - Contract: No
Confidentiality - Outputs: No
Consultancy: Yes
Consultancy Reason(s): Need for specialised or professional skills
Agency Reference ID: 0070033236

Yours faithfully,
Cyber Sceptic

FOI, Department of Home Affairs

OFFICIAL: Sensitive
Personal-Privacy

In reply please quote:

FOI Request:       FA 24/07/01802

File Number:        FA24/07/01802 

Dear Cyber Sceptic

Acknowledgement of Freedom of Information Access request

This letter acknowledges that on 28 July 2024 the Department of Home
Affairs (the Department) received your request to access documents held
by  the Department under the Freedom of Information Act 1982 (the FOI
Act). This letter also provides important information about your request.

Scope of request

You have requested access to the following:

I would like all available documents relating to the procurement detailed
below. This includes justification as to why this was a limited tender,
the decision maker who signed off on the procurement and the outcomes of
the procurement (results delivered).

CN ID: CN3937378
Agency: Department of Home Affairs
Publish Date: 23-Dec-2022
Category: Research programs
Contract Period: 19-Oct-2022 to 18-Nov-2022 Contract Value (AUD):
$338,580.00
Description: Ransomware targeting framework Procurement Method: Limited
tender Limited Tender Exemption: App A: 6. Research and development
services (but not inputs).
ATM ID: PRN0008310
Confidentiality - Contract: No
Confidentiality - Outputs: No
Consultancy: Yes
Consultancy Reason(s): Need for specialised or professional skills Agency
Reference ID: 0070033236.

Your request has been allocated FOI request number FA 24/07/01802. Please
include your FOI request number in all correspondence with the Freedom of
Information Section.

Timeframe

 

The timeframe for processing a request is 30 days from the day we receive
your request, as set out in the FOI Act.

 

Your review rights in relation to your request are available on [1]Freedom
of information reviews | OAIC.

Fees and Charges

Charges do not apply to requests from individuals seeking access to
documents about themselves. However, a charge may apply to all other
requests for access to documents.

Charges are based on the amount of time the Department spends on your
request. Charges can range from $10 to over $1,000 depending on the
complexity and scope of your request. The Office of the Australian
Information Commissioner reported that across the public service, the
average charge notified was $335.50 in 2020-21.

If a charge applies, you will be issued with a Notice of Charge that
explains the charge and your options.

Detailed information about FOI charges that may apply to your FOI request
is available on [2]the Department’s website.

We do not provide personal details of staff or non-public facing
operational email addresses

 

The Department’s practice is to exclude the personal details of Government
employees, including contractors, not in the Senior Executive Service
(SES), as well as the direct contact details of SES staff, contained in
documents that fall within scope of an FOI request. If you require
personal details of non-SES officers, or direct contact details of SES
staff, please inform us so the decision maker may consider your request.
Otherwise we will take it that you agree to that information being
excluded from the scope of your request as irrelevant under section
22(1)(a)(ii) of the FOI Act. However names of staff that have previously
been released in departmental correspondence may be disclosed.

We do not provide duplicated documents

 

If the FOI decision-maker deems a document to be a duplicate, they will
not assess those pages as part of your FOI request. This means that if a
there is a decision to release the document to you, you will receive only
one copy, even if multiple copies of that document exist.

Publication of document

Released documents you request may be published to our website.

 

Where documents are released to you in response to your request, the
Department may be required to publish these documents on its website
within 10 working days in accordance with section 11C of the FOI Act.
Publication will not be required where the documents contain personal or
business affairs information.

 

How to reduce or withdraw your request

 

Reducing the scope of your request can reduce the time and charges
associated with processing your FOI request.

 

To reduce or withdraw your request, contact the FOI section at
[3][Department of Home Affairs request email] and include your FOI request number.

Contacting the FOI Section

 

Should you wish to discuss your request you may contact the FOI Section at
[Department of Home Affairs request email].

 

Kind regards

 

Jade

Position number 60107422

FOI Officer Freedom of Information

Privacy, FOI and Records Management Branch | Legal Group

Department of Home Affairs

E: [4][Department of Home Affairs request email]

Personal-Privacy
OFFICIAL: Sensitive

 

 

 

show quoted sections

FOI, Department of Home Affairs

OFFICIAL: Sensitive
Personal-Privacy

In reply please quote:

FOI Request:       FA 24/07/01802

File Number:        FA24/07/01802 

Dear Cyber Sceptic

I refer to your request received on 28 July 2024 for access to documents
under the FOI Act. 

The current due date for your request is 27 August 2024. 

The Department seeks your agreement under section 15AA of the FOI Act to
extend the timeframe for the processing of your request by 30 days.  This
would extend the due date for your request to Thursday 26 September 2024. 

 

The reason we are seeking an extension of time is due to demand for
Departmental documents is high and we continue to experience increasing
volumes of incoming requests particularly in recent months. Each request
received by the Department is managed in the context of this large volume
which can impact the timeliness of our decisions and as such we seek
agreement from applicants on extensions of time where possible. We
are endeavouring to ensure, as an applicant, you understand the likely
timeframe for your request to be finalised. We continue to try to process
requests as quickly as possible regardless of if an extension is
provided.  

 

If you could please provide a response to this request by close of
business, 13 August 2024. 

 

Kind regards

 

Jade

Position number 60107422

FOI Officer Freedom of Information

Privacy, FOI and Records Management Branch | Legal Group

Department of Home Affairs

E: [1][Department of Home Affairs request email]

 

 

Personal-Privacy
OFFICIAL: Sensitive

 

 

Important Notice: The content of this email is intended only for use by
the individual or entity to whom it is addressed. If you have received
this email by mistake, please advise the sender and delete the message and
attachments immediately.  This email, including attachments, may contain
confidential, sensitive, legally privileged and/or copyright information.
 

Any review, retransmission, dissemination or other use of this information
by persons or entities other than the intended recipient is prohibited. 
The Department of Home Affairs, the ABF and the National Emergency
Management Agency respect your privacy and have obligations under the
Privacy Act 1988.  

Unsolicited commercial emails MUST NOT be sent to the originator of this
email.

References

Visible links
1. mailto:[Department of Home Affairs request email]

FOI, Department of Home Affairs

OFFICIAL: Sensitive
Personal-Privacy

In reply please quote:

FOI Request:       FA 24/07/01802

File Number:        FA24/07/01802 

Dear Cyber Sceptic (Right to Know)

I refer to your request received on 28 July 2024 for access to documents
under the FOI Act. 

The current due date for your request is 27 August 2024. 

The Department seeks your agreement under section 15AA of the FOI Act to
extend the timeframe for the processing of your request by 30 days.  This
would extend the due date for your request to Thursday 26 September 2024. 

 

The reason we are seeking an extension of time is due to demand for
Departmental documents is high and we continue to experience increasing
volumes of incoming requests particularly in recent months. Each request
received by the Department is managed in the context of this large volume
which can impact the timeliness of our decisions and as such we seek
agreement from applicants on extensions of time where possible. We
are endeavouring to ensure, as an applicant, you understand the likely
timeframe for your request to be finalised. We continue to try to process
requests as quickly as possible regardless of if an extension is
provided.  

 

If you could please provide a response to this request by close of
business, 27 August 2024. 

 

Kind regards

 

 

David
Team Leader – Authorised FOI Officer, Freedom of Information
Position Number 60157647

Privacy, FOI and Records Management Branch

Legal Group

Department of Home Affairs

E: [1][Department of Home Affairs request email]

 

Personal-Privacy
OFFICIAL: Sensitive

 

 

Important Notice: The content of this email is intended only for use by
the individual or entity to whom it is addressed. If you have received
this email by mistake, please advise the sender and delete the message and
attachments immediately.  This email, including attachments, may contain
confidential, sensitive, legally privileged and/or copyright information.
 

Any review, retransmission, dissemination or other use of this information
by persons or entities other than the intended recipient is prohibited. 
The Department of Home Affairs, the ABF and the National Emergency
Management Agency respect your privacy and have obligations under the
Privacy Act 1988.  

Unsolicited commercial emails MUST NOT be sent to the originator of this
email.

References

Visible links
1. mailto:[Department of Home Affairs request email]

OAIC - FOI DR,

4 Attachments

Our reference:           RQ24/03916 

Agency reference:    FA 24/07/01802

Agency name              Department of Home Affairs
By Email:                        [Department of Home Affairs request email]

Name                              Cyber Sceptic
By Email:                       
[FOI #11774 email]

Extension of time under s 15AC

Dear Parties,

Please find attached an extension of time decision relating to the above
referenced FOI request.

 

Regards,

[1][IMG]   Andriana DeIeso

Review Adviser

Office of the Australian Information Commissioner

Adelaide | GPO Box 5288 Sydney NSW 2001

E [2][email address]
 
I am available Monday to Wednesday; Tuesday and Wednesday alternate
weeks.   

 

Please note: The OAIC has revised its IC review procedures from 1 July
2024. For more information about these revised procedures, including new
resources to assist applicants and respondents, see our webpage:
[3]Information Commissioner reviews | OAIC
The OAIC acknowledges Traditional Custodians of Country across
Australia and their continuing connection to land, waters and
communities. We pay our respect to First Nations people,
cultures and Elders past and present.  

 

[4]Subscribe to Information Matters

 

 

Notice:

The information contained in this email message and any attached files may
be confidential information, and may also be the subject of legal
professional privilege. If you are not the intended recipient any use,
disclosure or copying of this email is unauthorised. If you received this
email in error, please notify the sender by contacting the department's
switchboard on 1300 488 064 during business hours (8:30am - 5pm Canberra
time) and delete all copies of this transmission together with any
attachments.

References

Visible links
1. https://www.oaic.gov.au/
2. mailto:[email address]
3. https://www.oaic.gov.au/freedom-of-infor...
4. https://www.oaic.gov.au/engage-with-us/n...

Dear Home Affairs

I note the OAIC's decision to Deny your request for an extension of time to respond to this FOI request.

Would you advise when you plan on providing a response to this FOI request?

I would prefer to avoid needing to seek Information Commissioner review (IC review) of the Agency’s deemed access refusal decision of 27 August 2024, so eagerly await your response.

Yours sincerely,

Cyber Sceptic

Dear OAIC - FOI DR,

Dear Office of the Australian Information Commissioner,

I am seeking Information Commissioner review (IC review) of the Agency’s deemed access refusal decision of 27 August 2024 relating to my FOI request to Department of Home Affairs, as per your corresponding denial of the Department's request for extension to my request.

Agency Department of Home Affairs
Applicant Cyber Sceptic
Date of decision 25 September 2024
OAIC reference number RQ24/03916
Agency reference number FA 24/07/01802

Correspondence relating to the original request to Home Affairs can be found at https://www.righttoknow.org.au/request/i...

Yours faithfully,
Cyber Sceptic

OAIC - FOI DR,

3 Attachments

Our reference: MR24/01663

Agency reference: FA 24/07/01802

 

Applicant: Cyber Sceptic

Respondent: Department of Home Affairs

 

By email: [1][FOI #11774 email]

Information Commissioner review application

Good afternoon Cyber Sceptic,

On 8 October 2024, you applied for IC review about a Freedom of
Information (FOI) decision made by the Respondent referenced at the top of
this email. This was because you indicated you had not received a decision
by the due date.

Why we are writing to you:

I am writing to you to help you make a valid IC review application.

At this time, the Information Commissioner does not yet have sufficient
evidence to be satisfied that you were the FOI applicant and, therefore,
that you had the right to apply for IC review.

 

Section 54L(3) of the FOI Act provides that an IC review application may
be made by, or on behalf of, the person who made the request to which the
decision relates.

 

The [2]Direction as to certain procedures to be followed by applicants in
Information Commissioner reviews (the Information Commissioner’s
Direction) states:

 

‘…The IC may require information about the applicant’s identity to
establish that they are the person who made the original FOI request or
evidence that a third party is authorised to seek review of the decision
by that person’ [2.12]

Action required by you before 24 October 2024:

Please provide a copy of any notification emails sent by the Right to Know
website’s administrator about the FOI request, a screenshot of the ‘My
requests’ page of your account on the Right to Know website (after you log
into your Right to Know account) showing the FOI request in question or
you may wish to upload this correspondence as plain text on Right to Know
request and provide us with confirmation of this.

Participation in IC review process:

You are required to comply with the Information Commissioner’s Direction.
If an applicant fails to comply with a direction, the Information
Commissioner may in some cases decide not to undertake or continue to
undertake an IC review.  The Direction also states:

 

* Applicants must respond to requests for information from the OAIC within
the time provided unless there are exceptional circumstances warranting
a longer period to respond. If more time is needed, a request for an
extension of time must be made to the OAIC at the earliest opportunity
within the period provided for response, and no later than 2 days before
that period is due to expire. Requests for more time must explain the
exceptional circumstances that necessitate additional time and propose a
new date for response. Approval of an extension request is at the
discretion of the OAIC [2.22]

 

 1. The OAIC expects that applicants and agencies will engage with the IC
review process, with respect and courtesy [2.23]

 

If you do not provide the information by the abovementioned date, we
intend to close the IC review application.

Assistance

If you are unable to respond by 24 October 2024, you must request more
time at the earliest opportunity and no later than 22 October 2024.
Requests for more time must explain why you need more time, and you must
tell us when you will be able to provide a response.

If you require assistance regarding this email, please contact us at
[3][email address].

 

Please quote the reference MR24/01663 in all correspondence.

 

Kind regards,

[4]A blue   Intake and Early Resolution
background with
white text Freedom of Information Branch
Description
automatically Office of the Australian Information Commissioner
generated
[5]Enquiry form
Please note: The OAIC has revised its IC review procedures from 1 July
2024. For more information about these revised procedures, including new
resources to assist applicants and respondents, see our webpage:
[6]Information Commissioner reviews | OAIC
The OAIC acknowledges Traditional Custodians of Country across Australia
and their continuing connection to land, waters and communities. We pay
our respect to First Nations people, cultures and Elders past and present.

 

[7]Subscribe to Information Matters

 

 

show quoted sections

Dear OAIC - FOI DR,

In regards to your request :-

Please provide a copy of any notification emails sent by the Right to Know
website’s administrator about the FOI request, a screenshot of the ‘My
requests’ page of your account on the Right to Know website (after you log
into your Right to Know account) showing the FOI request in question or
you may wish to upload this correspondence as plain text on Right to Know
request and provide us with confirmation of this.

I can confirm I am the original application of this FOI request to Department of Home affairs, and I am requesting Information Commissioner review. I would be happy to provide further information as required, but Right To Know does not allow screenshots to be attached to replies.

Yours sincerely,

Cyber Sceptic