Named in the law, defined nowhere

Search the NSW statute book for "Cyber Security NSW" and you get one Act: the Privacy and Personal Information Protection Act 1998. Two sections added in 2022 let the Information and Privacy Commission share information with Cyber Security NSW "to enable Cyber Security NSW to exercise its functions". No Act says what those functions are. The office's authority rests on a circular that the Secretary of the Department of Customer Service can amend or withdraw without Parliament.