Australia Unveils New Cyber Security Policy

The Australian government is taking concrete steps to address the country’s growing cyber security threats. Minister Clare O’Neil, who serves as both Minister for Home Affairs and Minister for Cyber Security, is set to unveil a new cyber security policy designed to strengthen the defenses of Australian citizens, businesses, and government agencies.

O’Neil refers to cyber threats as “the fastest growing threat that we face as a nation.” The policy aims to not only make Australia a harder target for cyber attacks but also enable faster recovery for victims of attacks that cannot be prevented. With an allocated budget of $586.9 million, the policy, which spans from now until 2030, builds upon existing initiatives with an additional $2.3 billion commitment.

The largest portion of the allocated funding, $290.8 million, will be used to support small and medium-sized businesses, enhance public awareness, combat cyber crime, disrupt the ransomware business model, and strengthen the security of Australian identities. Another $143.6 million will be invested in reinforcing the defenses of critical infrastructure and enhancing government cyber security.

As part of the policy, telecommunication providers will be held to the same security standards as other critical infrastructure entities. The security regulation for the sector will shift from the Telecommunications Act to the Security of Critical Infrastructure Act, aligning it with the criticality and risk profile of the industry. The policy also aims to establish consumer standards for smart devices and software, create a threat sharing platform for the health sector, foster a professional cyber workforce, accelerate the growth of the cyber industry, and invest in regional cooperation and leadership in cyber governance forums internationally.

The government’s vision for Australia is to become a global leader in cyber security by 2030. The policy outlines three time horizons for achieving this goal. In 2023-25, foundations will be strengthened, addressing critical gaps and implementing better protections. From 2026-28, the cyber industry will be further scaled up, and efforts will be made to cultivate a diverse cyber workforce. Lastly, in 2029-30, Australia aims to advance the global frontier of cyber security and lead the development of emerging cyber technologies.

Minister O’Neil acknowledges the attractiveness of Australia as a target for cyber criminals due to the country’s wealth and fast adoption of new technologies. Millions of Australians have fallen victim to data breaches and cyber attacks in the past year. However, O’Neil also sees cyber security as an opportunity for Australia, as the global cyber industry is rapidly growing and here to stay.

The success of the cyber security strategy will heavily rely on close collaboration between the government and industry. Minister O’Neil emphasizes the need for partnership in delivering effective cyber security measures. Darren Goldie, recently appointed as National Cyber Security Coordinator by O’Neil, will not be present for the policy release as he has been recalled to the Defence Department in response to a workforce complaint.

Australia’s new cyber security policy sets a strong foundation for protecting the country against the growing threat of cyber attacks. By investing in critical infrastructure, public awareness, and developing a robust cyber workforce, Australia is positioning itself as a global leader in cyber security. With close collaboration between the government and industry, the nation aims to create a safer digital environment for its citizens, businesses, and government agencies.