Hi there,
I’ve received some questions from our members and industry about the recent MPR updates. I’ve added them here to support anyone else who has similar queries.
Who needs to receive cyber security awareness training?
The MPR guidance notes say: “A Subscriber must also take reasonable steps to ensure that each of its Users has received training appropriate to their use of the ELN, including cyber security awareness training covering, as a minimum, secure use of the ELN, secure use of the Subscriber’s Systems and secure use of email and other electronic communication. Best practice would be to ensure the User completes the training before the User is given access to the ELN. A Subscriber must also ensure that each of its other principals, Officers, employees, agents and contractors who access the Subscriber’s Systems receive cyber security awareness training covering, as a minimum, secure use of the Subscriber’s Systems and secure use of email and other electronic communication. “
How is a user defined?
User is defined in the MPR as follows:
“…an Individual who:
(a) is a principal, Officer, employee, agent or contractor of the Subscriber and is authorised by a Subscriber to access and use the ELN on behalf of the Subscriber; or
(b) has been appointed as the manager (however described) of the business of a Subscriber that is an Australian Legal Practitioner, Law Practice or Licensed Conveyancer, under any State or Territory law.”
How frequently should cyber security awareness training be completed?
It is up to you and your business to decide how frequently cyber security awareness training is completed. Please refer to PEXA’s Subscriber Security Policy (section 4.4.4 Training Obligation) for guidance on making this decision.
Karen Olsen
General Manager, Members Success - Majors
... View more
