Book excerpt: The Victorian Protective Data Security Framework (VPDSF) was established under Part 4 of Victoria's Privacy and Data Protection Act 2014 and provides direction to Victorian public sector agencies or bodies on their data security obligations. The VPDSF has been developed to monitor and assure the security of public sector information and information systems across the Victorian public sector (VPS). This document is primarily written to inform executives and designed to support information security practitioners across the VPS.