National cyber defences, tactics for bolstering cyber protection, and the need for cloud modernisation were some of the key challenges discussed when some of Australia’s leading cyber security and technology experts met in Canberra.
Cyber security experts gathered at the National Press Club to discuss the latest challenges facing the sector, including skills shortages and the government’s comprehensive strategy and legislative agenda to bolster national cyber defences.
The event – Fortifying Australia’s Data Resilience and Security – was held at the National Press Club in Canberra and focused on the need for robust strategies to protect the nation’s digital landscape, highlighting some of the impending challenges for government, industry and service providers.
As one of the most targeted countries globally, Australia continues to face significant cyber risks. The luncheon delved into key topics, including:
Australia’s 2023-2030 Cyber Security Strategy
An update on the government’s comprehensive plan to bolster national cyber defences.
Proposed Cyber Security Legislative Package 2024
Discussion of the Cyber Security Bill 2024, Intelligence Services and Other Legislation Amendment (Cyber Security) Bill 2024, and Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Bill 2024.
Global Trends in AI, Data Resilience, and Protection
Exploring the evolving landscape of artificial intelligence and its implications for data security.
Strategies and Reforms
Examining measures to safeguard Australian organisations and ensure data sovereignty and residency.
AUCyber Chief Corporate Affairs Officer Rafe Berding said the event highlighted the key things that every business and government agency could do to help protect, detect and respond to cyber threats:
“Australia continues to be one of the most targeted countries for cybercrime, with attacks occurring on average every six minutes. To protect our systems and sensitive data, it is crucial that Australian organisations not only prioritise securing their digital infrastructure but also actively monitor and respond to emerging threats.”
“Australia enjoys a privileged position due to our wealth and digital advancement, yet it is precisely this prosperity and technological maturity that make us a prime target for global cyber threats. This year, Australian organisations are set to invest over $133 billion in IT, with a strong emphasis on strengthening cyber security, enhancing data resilience, and driving cloud modernisation efforts,” Mr Berding said.
AUCyber Head of Government Relations, Samantha Maher, emphasised that sovereign capabilities and local expertise are crucial in empowering and safeguarding Australia’s digital economy.
“In Australia, data has traditionally been dispersed across various locations, with many organisations and government departments still relying on on-premises servers for storage. However, we are now witnessing a positive shift towards cloud adoption, with more data being migrated to cloud environments, offering improved scalability and enhanced security.”
“It’s crucial to have a clear understanding of the data we hold and how it is managed, particularly from an archiving and privacy perspective. Ensuring that sensitive information is adequately protected and retained only for as long as necessary—ideally no more than 12 months—is vital for compliance and data security.”
“Migrating from on-premises databases to the cloud is not a straightforward process. It often involves re-indexing, restructuring, and thorough data cleansing to ensure information is organised correctly and optimally placed in the cloud environment for efficient use and secure access.”
Annie Haggar, Partner and Head of Cyber Security at Norton Rose Fulbright, expressed support for the Cyber Security Legislative Package, highlighting its potential to significantly enhance Australia’s cyber resilience.
“A key provision of the legislation is the requirement to report ransom payments, a crucial measure for enabling the government to gather essential data and intelligence. While there has been ongoing debate over whether ransom payments should be made illegal, the lack of data has prevented the government from determining the potential effectiveness of such a policy.
The legislative changes aim to support both businesses and citizens, encouraging safe technology use and protecting critical infrastructure, with further reforms expected to address additional areas of concern.
The package also includes mandatory cyber security standards for Internet of Things (IoT) devices, ensuring that products sold in Australia meet a minimum level of security,” Ms Haggar said.
Australian Information Industry Association (AIIA) CEO Simon Bush said the importance of uplifting cyber security and resilience across the entire economy:
“When it comes to workforce management and skills development, our own research and industry data highlight a significant shortfall of qualified cyber security professionals within the IT sector. This skills gap is one of the most pressing challenges facing the industry today. As cyber threats become increasingly sophisticated, the demand for skilled cyber security experts is growing at a pace that the supply of talent is struggling to match. Addressing this shortage is critical to ensuring the security and resilience of organisations and industries that rely on digital infrastructure.”
“Artificial intelligence (AI) represents a new wave of transformative technological change, marking a fundamental shift in how businesses operate and innovate. It offers step-change improvements in productivity, efficiency, and decision-making capabilities. By automating complex tasks, enhancing data analytics, and driving innovation across sectors, AI is set to become a cornerstone of modern business strategy, unlocking new opportunities and driving competitive advantage,” Mr Bush said.