Regulations and standards

The NCSC provides regulatory functions for New Zealand’s telecommunications network security. We also provide risk assessments and advice to identify and manage risks to New Zealand’s national security.

We support the Director-General of the Government Communications Security Bureau in their role as GCISO, setting information security standards through the development and maintenance of the New Zealand Information Security Manual (NZISM).

Te haumaru whatunga TISCA TICSA telecommunications network security

The Telecommunications (Interception Capability and Security) Act 2013 (TICSA) sets out the obligations for New Zealand’s telecommunications providers.

The Regulatory Unit in the NCSC is the team responsible for the day-to-day network security regulatory functions under Part 3 of TICSA, including assessing certain change proposals to public telecommunications networks.

Find out more about TICSA

Te Aratohu Haumaru Mōhiohio i Aotearoa (NZISM) New Zealand Information Security Manual (NZISM)

The New Zealand Information Security Manual (NZISM) is the New Zealand Government's manual on information assurance and information systems security.

It provides a set of essential or baseline controls and additional good and recommended practice controls for use by government agencies.

New Zealand Information Security Manual

Tohutohu tūraru haumaru ā-motu National security risk advice

We provide national security risk assessment advice under certain legislation, and support the New Zealand Security Intelligence Service to advise the Overseas Investment Office about proposed overseas investments in New Zealand.

National security risk advice