Cyber Security Update: Strengthening Australia’s Digital Future

The Australian Government is steadfast in its commitment to enhancing the security and resilience of our nation’s cyber environment and critical infrastructure. In response to a heightened geopolitical and cyber threat landscape, new measures are being introduced to protect Australia’s national security and economic stability.

Introducing Australia’s First Standalone Cyber Security Act
This week marks a significant milestone, with the expected passage of legislation to establish Australia’s first standalone Cyber Security Act. This Act will provide a robust legislative framework to ensure strong protections and bring Australia in line with international best practices.

As part of the 2023-2030 Australian Cyber Security Strategy, the Cyber Security Legislative Package will implement seven initiatives to address critical gaps in existing laws. These reforms represent a pivotal step in positioning Australia as a global leader in cyber security.

Key Measures in the Legislative Package

  • Mandatory Cyber Standards for Smart Devices: Establishing minimum security requirements.
  • Mandatory Ransomware Reporting: Requiring specific businesses to report ransom payments.
  • ‘Limited Use’ Obligation: Enhancing oversight for the National Cyber Security Coordinator and Australian Signals Directorate (ASD).
  • Cyber Incident Review Board: Creating a dedicated body to assess and learn from significant incidents.

Strengthening the Security of Critical Infrastructure

Reforms under the Security of Critical Infrastructure Act 2018 (SOCI Act) will:

  • Clarify obligations for systems managing business-critical data.
  • Enhance government assistance during critical incidents.
  • Simplify industry-government information sharing.
  • Empower the government to direct entities to address deficiencies in risk management programs.
  • Integrate telecommunications security into the SOCI Act framework.

Informed by Comprehensive Consultation

This legislative package reflects extensive consultation with industry, government, and community stakeholders. Feedback was gathered through the Cyber Security Legislative Reforms Consultation Paper (December 2023) and targeted engagement on the Exposure Draft package (September 2024).

A Unified Approach to Cyber Security
These reforms demonstrate a collective effort to safeguard Australia’s cyber environment against emerging threats. By addressing legislative gaps and fostering collaboration, Australia is taking bold steps to protect its critical infrastructure and strengthen its position as a leader in global cyber security.

Please feel free to contact us for more details