Red X iconGreen tick iconYellow tick icon
Skip to main content Skip to side navigation

Terms of Reference

Purpose

The Council Cyber Event Governance Committee (CEGC) has delegated authority to act on behalf of Council where urgent Council-level decisions are required in relation to a significant cyber event. During such an event it may be impracticable to convene a meeting of the whole Council or contact all members.

Scope

The Committee may be convened to act on behalf of the University Council when, in the view of the Chancellor and/or Pro-Chancellor, in consultation with the Vice-Chancellor:

  • a significant cyber event has caused, or is reasonably likely to cause, material disruption or significant operational, legal, financial, regulatory, privacy, safety, reputational or other serious consequences for the University; and
  • the urgency of decisions arising from the matter makes it impracticable to convene Council.

Key Responsibilities

The functions of the Committee are to:

  1. Provide governance oversight of the University’s response to a significant cyber event
  2. Receive advice and updates from management regarding the cyber event and the University’s response
  3. Exercise delegated authority granted by Council in relation to the cyber event where urgent Council-level decisions are required
  4. Ensure the Council as a whole is kept informed of significant developments, risks, and decisions relating to the cyber event.

Constitution

The membership of the Committee shall normally comprise:

  • Chancellor (Chair);
  • Pro-Chancellor;
  • Council member(s) with legal expertise; and
  • the Convener of the Digital Technology Committee.

In attendance:

  • Vice-Chancellor
  • Registrar and Secretary to Council

While the Constitution, as set out above, is ideal, it is understood that the nature of a cyber event may require flexibility, depending on the availability of Council members. As such, the members of the Committee may co-opt other Council members as deemed appropriate in the circumstances.

A quorum shall be three members of the Council, including at least one of the Chancellor or Pro-Chancellor.

The Vice-Chancellor shall be in attendance to provide advice and reports on the University’s operational response to the cyber event. The Deputy Vice-Chancellor (Operations), Chief Digital Officer, legal counsel and other relevant advisers may attend as required. If the Vice-Chancellor is unavailable, a delegate may be nominated.

Reporting

All decisions made by the Committee shall be reported to the next meeting of Council and be recorded in the Council minutes.

Established by the University Council on 13 October 2026.

Back to top