Request for Information - Cyber Security Dashboard

The Queensland Government is seeking information from the market to better understand available products, services and delivery approaches that could support an executive-level cyber security dashboard and/or reporting capability.

The intended capability would provide executive government with a consolidated view of the cyber security position across Queensland Government budget sector agencies, with potential future expansion to include Government Owned Corporations (GOCs) and statutory authorities. The current budget sector comprises approximately 21 agencies/entities, with a broader future scope potentially including statutory authorities, in addition to relevant GOCs.

Queensland Government agencies operate in a complex and diverse digital environment, with varying business functions, risk profiles, technology landscapes and levels of cyber security maturity. Cyber security information is often generated through a range of sources, including assessments, assurance activities, operational reporting, incident information, risk reporting and control performance measures. This information may be held in different formats, at different levels of maturity, and with varying degrees of consistency across entities.

Executive government requires clear, timely and meaningful insight into the overall cyber security posture of the Queensland Government to support strategic oversight, risk-informed decision-making, prioritisation of investment, and whole-of-government assurance. This includes the ability to understand broad trends, emerging issues, areas of elevated risk, and comparative performance across a diverse operating environment.

This Request for Information is intended to inform the Queensland Government’s understanding of the market and the range of possible approaches available. It is not intended to prescribe a particular technical solution, architecture, product type or delivery model.

Background information / Compatibility requirements

At present, there is no single, fit-for-purpose executive-level mechanism that consistently aggregates and presents cyber security information across in-scope Queensland Government entities in a way that is sufficiently clear, comparable and decision-useful for executive government.

Relevant cyber security information may exist across multiple systems, reporting processes and assessment mechanisms, which can make it difficult to obtain a consolidated whole-of-government view. Differences in data quality, reporting methods, terminology, technical maturity and system capability across entities may also limit the ability to produce consistent and trusted reporting for senior decision-makers.

Desired Outcomes ('Nice to haves', Conditions & Warranties, SLA's, Project benefits): The Queensland Government is seeking to understand what the market can offer to address this problem through a capability that could:

• provide a consolidated view of cyber security posture across multiple entities

• support reporting at whole-of-government, portfolio, agency and, where appropriate, entity level

• present information in a form suitable for executive audiences, including dashboards, summary reporting and trend analysis

• draw on a range of potential data inputs, including manual, semi-automated and automated sources

• support consistent interpretation and aggregation of information across entities with differing size, complexity and maturity

• minimise reporting burden on participating entities

• support phased implementation, beginning with budget sector agencies and potentially expanding over time

• operate in a manner that is interoperable, scalable and adaptable to existing and evolving government environments.

The Queensland Government is interested in practical, proportionate and achievable approaches, including those that may be delivered through configurable products, managed services, implementation support, advisory services, or hybrid models. Responses from a broad range of suppliers are encouraged, including small and medium enterprises.

Through this Request for Information, the Queensland Government seeks to better understand the maturity of the market, the types of solutions and services available, implementation considerations, and the options for establishing an executive cyber security reporting capability that is trusted, scalable and fit for purpose.

Buyer: Customer, Data and Small Business (CDSB)

Buyer location: 140 Creek St, Brisbane City, Queensland 4000, Australia

VendorPanel reference: VP525921

Buyer's reference: QG-CDSB-2026-935

Opens: Thursday 17 September 2026 (E. Australia Standard Time)

Closes: Friday 30 October 2026 03:00 PM (E. Australia Standard Time)

Supplier query cut-off: Monday 26 October 2026 03:00 PM (E. Australia Standard Time)

Expected decision: Friday 27 November 2026 (E. Australia Standard Time)

Categories: IT & Telecomms; 1: IT Services; 2: Services - Architecture & Design; 3: Services - Benchmarking; 4: Services - Consultants; 5: Services - Industry Sector Expertise; 6: Services - Managed Services; 7: Services - Other; 8: Services - Outsourced Services; 9: Services - Risk Management; 10: Services - Software Support & Maintenance; 11: Services - Strategy & Analysis; 12: Services - Support; 13: Services - Testing Services

Regions of service: Queensland; 1: Brisbane; All Regions of Service locations are within Australia.

Tender documents: 1

Published on VendorPanel Public Tenders. Documents and responses require free VendorPanel supplier registration.