Australia Revamps Cybersecurity Protections After Port Cyberattack
Australia will undertake an economy-wide revamp of its cybersecurity protections including revised data laws, mandatory reporting and a new nationwide cyber council in response to several significant hacks targeting businesses and infrastructure over the past year.
Home Affairs Minister Clare O’Neil announced the cybersecurity strategy on Wednesday in Sydney, including A$586.9 million ($385 million) in new funding to protect firms and individuals, defend critical infrastructure and bolster sovereign capabilities.
Australia has been in a “cyber slumber” in recent years, leaving the country exposed, O’Neil said in a statement ahead of the release. The minister said Australia now aimed to be a world leader in cybersecurity by 2030 and that the new strategy would “enable us to bounce back faster from attacks that we cannot prevent.”
DP World Attack ‘Stark Reminder’ About Prioritizing Cyber Spend: Australia Watchdog
“We will put cyber criminals on notice, and we will fight back against the threat,” she said in the statement.
The government’s announcement comes after several damaging cyberattacks on major Australian businesses and infrastructure in the past year. These have seen sensitive data stolen and resulted in major disruptions to supply chains.
Almost 40% of Australia’s ports were hit by a cyberattack on DP World earlier this month, which led to a backlog of thousands of containers across the country. In late 2022, communications provider Optus and private health insurer Medibank were hit by hacks, which saw private consumer data leaked onto the internet.
Under the new cybersecurity strategy, the government will take measures to better protect consumer data and improve coordination on preventing hacking attempts. O’Neil has committed to work with businesses to create a mandatory reporting structure for ransomware attacks, under which victims could report an attack under a “no fault, no liability” system.
The government will establish an Executive Cyber Council that will work with industry leaders to share information on cybersecurity threats and improve collaboration between the public and private sectors. In addition, telecommunications providers will be treated as critical infrastructure, both improving the protections for consumers and raising the penalties for cybersecurity failures.
Government data retention requirements will also be revised to examine how much personal data needs to be stored by companies. The restrictions have previously come under criticism by privacy advocates following leaks of personal information such as passports and contact information which companies were forced to hold for long periods of time under government legislation.
Photograph: An employee at the Westpac Banking Corp. Financial Crime Hub in Sydney, Australia, on Tuesday, May 16, 2023. Westpac opened the fraud prevention center in October 2022, adding 540 financial crime specialists. Westpac is one of 17 banks taking part in the Australian Financial Crimes Exchange program, which establishes a system whereby banks can report suspected scams and freeze funds more easily. Photo credit: Brent Lewin/Bloomberg
Related:
- Australia Is Inadvertently Inviting Cyber Crimewave, Data Theft Victim Service Warns
- Regulator Tells Australian Banks to Boost Cyber-Attack Defenses
- Australia Plans to Toughen Privacy Rules After Massive Cyber Attack on Optus
- Atlantic Hurricane Season Could Intensify in Coming Weeks, Meteorologists Say
- Americans Shop Around for Insurance More Than Ever as Costs Soar
- Lyft is a Motor Carrier and State Farm Can Be Sued Directly, Georgia Court Says
- Police Officer’s Family Sues Girlfriend Accused of His Death and Bars That Served Her