Integrated Family and Youth Services (IFYS) has been servicing south-east, central and northern Queensland communities for over 30 years, developing a wide range of responses to the needs of children, young people and families. Headquartered in Maroochydore on the Sunshine Coast, IFYS delivers 25 separate accommodation, child protection, counselling and support services throughout Queensland, working in close partnership with government agencies, businesses and community organisations.

Operating at scale — across multiple regions, government funding streams and service delivery models — IFYS handles significant volumes of sensitive personal information relating to some of Queensland’s most vulnerable people: children and young people in out-of-home care, individuals experiencing homelessness, people with disability, and families in crisis. The protection, governance and integrity of that information is not only a regulatory obligation but a fundamental duty of care.

As IFYS has grown in scope and complexity, so too have the expectations of government funders, regulators and partner agencies around information security maturity, data governance and compliance assurance. Demonstrating structured, auditable and internationally recognised information security practices has become central to maintaining the trust of stakeholders and securing ongoing program funding.

IFYS engaged Iocane for consulting and advisory services spanning information management strategy and ISO 27001 certification readiness. Iocane works alongside the IFYS leadership and operations teams to assess the organisation’s existing information security posture, identify gaps against the ISO 27001:2022 standard, and develop a practical roadmap toward certification.

Iocane’s advisory work encompasses policy and procedure development, risk assessment frameworks, asset and data classification, and internal controls aligned to IFYS’s not-for-profit operating environment and government reporting obligations. Practical, plain-language guidance ensures that Iocane’s recommendations are actionable for IFYS staff across diverse program areas – not just the IT function.

Through the Iocane engagement, IFYS gains a structured, defensible Information Security Management System (ISMS) aligned to ISO 27001 – equipping the organisation to demonstrate information security maturity to government funders, oversight bodies and community partners alike.