Internal security standards
Lewis made this Official Information request to Fire and Emergency New Zealand
Currently waiting for a response from Fire and Emergency New Zealand, they must respond promptly and normally no later than (details and exceptions).
From: Lewis
Kia ora,
Under the Official Information Act 1982, I request copies of the current documents used by Fire and Emergency New Zealand to assess or approve third-party cloud-based or software-as-a-service applications for use by brigades or FENZ personnel.
I am particularly seeking:
- Supplier-facing ICT security and privacy requirements, checklists or questionnaires.
- Requirements relating to authentication, access control, data hosting or location, logging, backups, incident response, vulnerability testing, data retention and deletion.
- Privacy impact assessment or security-risk assessment templates used when considering new software.
- The process and decision-making responsibilities for approving new applications or adding them to an approved software or ICT systems list.
I am not requesting credentials, network diagrams, known vulnerabilities or other operationally sensitive information.
If complete documents cannot be released, please provide redacted copies or a summary of the applicable requirements. If this request is considered too broad, please contact me so I can refine it before a decision is made.
I would prefer the information electronically.
Ngā mihi,
Lewis
From: Official Information Requests
Fire and Emergency New Zealand
Kia ora Lewis
Thank you for your request of 13 July 2026, via the FYI website,
requesting information under the Official Information Act 1982 (OIA).
Section 12 of the OIA provides that requests may only be made by:
o a New Zealand citizen or permanent resident
o a person who is in New Zealand
o a body corporate that is either incorporated in New Zealand; or
o a body corporate that has a place of business in New Zealand
The Ombudsman notes that agencies are entitled to ask requesters for
information to satisfy themselves that the requester meets the eligibility
requirements of the OIA. As your request was submitted using a name and
email address from which eligibility cannot reasonably be inferred, we are
seeking information that will enable us to determine whether you meet one
of the eligibility criteria in section 12 of the OIA. Examples of
information that may assist include:
o documentation that reasonably demonstrates that you meet one of the
section 12 eligibility criteria (for example, a New Zealand driver’s
licence or other photo ID)
o a copy of a recent utility bill (or other documentation addressed to
you) that evidences your residential address in New Zealand; or
o a copy of information that evidences you’re currently in New Zealand
(this could include a posted letter)
Please navigate to our website to find our official information request
email address which you can email the requested evidence to (we are unable
to provide it here as the FYI website removes email addresses
automatically).
Thank you and we look forward to your reply.
Ngā mihi,
Information Requests Team
[1]Description: Cato Server:WORK IN PROGRESS:FENZ:FENZ_Assets:FENZ
Logos:FENZ logos _Supplied to FENZ:FENZ Logos png:FENZ Logo_CMYK.png
E: [2][FENZ request email]
W: [3]www.fireandemergency.nz
A: Fire and Emergency National Headquarters
Level 7, 42-52 Willis Street, Wellington Central
PO Box 2133, Wellington 6011
show quoted sections
From: Official Information Requests
Fire and Emergency New Zealand
Tēnā koe Lewis
We write to acknowledge receipt of your information request dated 13 July
2026. Our commitment is to provide a response to your request as soon as
possible, and no later than 20 working days after the day it was received.
If we are unable to meet this timeframe, we will inform you promptly and
provide details regarding any extension required. Should clarification be
necessary for your request, we may reach out to you for additional
information.
The information you have requested may contain the names and contact
details of our staff or volunteers. Please let us know whether you require
these names and contact details. We may need to consult our people before
deciding whether we can release this information, and this may take a bit
more time. If we do not hear from you, we will assume that you do not
require their names and contact details.
Nāku noa, nā
Information Request Team
[1][IMG][2][IMG][3][IMG][4][IMG][5][IMG][6][IMG]
show quoted sections
From: Lewis
Dear Official Information Requests,
No names or contact details are requested whatsoever. Thank you.
Yours sincerely,
Lewis
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence (note: this contains the same information already available above).
Offensive? Unsuitable?
Requests for personal information and vexatious requests are not considered valid requests for Official Information (read more).
If you believe this request is not suitable, you can report it for attention by the site administrators
Report this request