What are the 6 security domains of PSPF?

The 6 Security Domains of the PSPF: A Holistic Approach to Public Safety

Effective security in the public sector isn’t just about firewalls or locked doors—it’s about a comprehensive strategy that covers every angle. The Public Sector Protection Framework (PSPF) reflects this reality by structuring its approach around six core security domains: governance, risk, information, technology, personnel, and physical security.

Governance sets the foundation, ensuring that policies, accountability, and oversight mechanisms are in place at the highest levels. Without strong governance, even the most advanced security tools can fall short.

Risk management follows closely, helping organisations identify, assess, and prioritise threats. It’s not about eliminating all risks—impossible, really—but about making informed decisions to reduce exposure.

When it comes to information security, the focus is on protecting data integrity, confidentiality, and availability. Whether digital or paper-based, sensitive information must be handled with care across its entire lifecycle.

Technology security tackles the digital landscape—networks, systems, and applications. As cyber threats grow more sophisticated, this domain ensures defences keep pace with evolving challenges, from secure configurations to monitoring and incident response.

Personnel security recognises that people are both assets and potential vulnerabilities. Training, background checks, and a culture of awareness ensure staff understand their role in maintaining security.

Finally, physical security covers access controls, surveillance, and protection of facilities. Even the most secure digital system can be compromised if someone walks right in.

Together, these six domains create a layered, integrated approach. As of September 2025, the PSPF continues to evolve, reinforcing resilience across the public sector—not by reacting to threats, but by anticipating them.