Speculo blog

NZISM Explained: What NZ Government Agencies Need to Know

13 May 2026 · 1 min read

This one’s on the way.

NZISM — the New Zealand Information Security Manual — is the comprehensive security standard NZ government agencies are assessed against. It is a long document, and we are not going to publish a quick take on it.

We are writing a proper explainer: what NZISM actually asks of a government agency, where the work compounds with your MCSS return, which control families carry the most cost to do well, and where the leverage is for security teams trying to operate it without doubling their headcount.

It will land in the next few weeks. In the meantime: