Yes, the PSPF (Protective Security Policy Framework) is mandatory for all Australian government agencies and entities.