The ACSC operates in collaboration with domestic and international intelligence and law enforcement partners to: ■ address the global threat of ransomware through collaboration and information sharing, to disrupt the syndicates causing greatest harm ■ prevent and disrupt cybercrime by providing operational intelligence regarding offshore cybercriminals targeting Australia, and ■ prevent and mitigate ransomware attacks. For example, in April 2021, the ACSC prevented an Australia-based financial company from becoming the victim of the Ryuk variant of ransomware. By analysing information from previous ransomware incidents, the ACSC identified potential victims and provided technical advice to mitigate the threat of ransomware attacks. To support Australians in avoiding and recovering from ransomware incidents such as the above, the ACSC provides technical advice and guidance to the public on active ransomware software via cyber.gov.au. In December 2020, the ACSC launched the Act Now, Stay Secure media campaign, the first phase of which focused on providing advice to Australians on protecting themselves from ransomware. The campaign promoted new technical ransomware guides, published by ASD and available on cyber.gov.au, including a prevention and detection guide, an emergency response guide and two step-by-step guides. In addition to the Act Now, Stay Secure campaign, ASD provided advice on a range of other mitigation methods, including an updated Essential Eight Maturity Model, threat level services, and the Partner Portal that informs the public of Australia’s current cyber threat levels. ACSC Initiative: Critical Infrastructure – Uplift Program (CI-UP) The ACSC has launched CI-UP to help protect Australia’s essential services from cyber threats by raising the security levels of critical infrastructure organisations. CI-UP is part of the Australian Government’s Cyber Enhanced Situational Awareness and Response (CESAR) package and complements the Government’s ongoing work to protect critical infrastructure security through proposed amendments to the Security of Critical Infrastructure Act 2018. CI-UP will build knowledge and expertise for critical infrastructure providers to strengthen their cyber defences. CI-UP has been designed to: ■ evaluate the cyber security maturity of critical infrastructure and systems of national significance using the Cybersecurity Capability Maturity Model (C2M2) ■ deliver a set of prioritised vulnerability and risk mitigation recommendations to partners and assist them to plan for, and implement, these recommendations based on risk ■ connect partners to other ACSC services. Further information on CI-UP, including how to register to participate in the pilot, is on the ACSC website at: Critical Infrastructure Uplift Program (CI-UP). 32