How the Government will take action The Australian Government will pursue a balance of voluntary and mandatory actions to enhance the security of our technology. These actions will provide end-users with confidence that their digital products are safe to use, without hindering industry innovation. Under this initiative, the Government will: 1. Adopt international security standards for digital technologies The Government will work with industry to encourage the adoption of international standards for secure-by-design in digital technologies such as IoT devices. In the short term, we will collaborate with industry experts to co-design options to legislate a mandatory cyber security standard for IoT devices. The standard could be aligned to international standards to ensure consistency between jurisdictions and minimise the regulatory burden on Australian businesses, while meeting our national security objectives. To help consumers make informed choices about the security of devices on the market, the Government will also develop a voluntary labelling scheme for consumer-grade smart devices. These reforms will align Australia with international markets, including the United States, Singapore and the United Kingdom. 2. Embed cyber security into software development practices The Government will work with industry and international partners to shape the development and adoption of international software security standards, including secure-by-design and secure-by-default practices. As a first step, we will work with industry and our international partners to co-design a voluntary code of practice for app stores and app developers. This code will clearly communicate expectations of cyber security in software development. App stores are one of the best channels for intervention, as they are the single biggest marketplace to access consumer software. App stores also play a critical role in influencing software development practices by setting standards to screen products sold on their stores. The Government will work with industry to develop clear guidance on actions that app stores and developers can take to protect consumers and businesses from cyber attacks. On the international stage, we will work with Quad partners to harmonise software standards for government procurement. Together with India, Japan and the United States, we are mapping our shared software standards and identifying opportunities to shift to common security standards. Aligning our standards will streamline procurement processes for industry, and our collective purchasing power will help set strong IT security standards across global markets. 3. Manage the national security risks of digital technology The Government will develop a framework for assessing the national security risks presented by vendor products and services operating within and entering the Australian economy. Using this framework, the Government will help industry manage supply chain risks and make informed procurement decisions about the security of products and services. We will also consult industry on further options to limit the availability of non-secure products in the domestic market. 30 2023–2030 Australian Cyber Security Strategy