Ministerial Foreword / Executive Summary The threats posed by cybercrime have significantly evolved since the release of Australia’s 2013 National Plan to Combat Cybercrime. Advances in technology and the greater degree to which the Australian community utilises digital and communications technologies continue to increase opportunities for cybercriminals to take advantage of Australians and impact our security, public safety and prosperity. Cybercrime is not only growing in scale and sophistication, but cybercriminals are also becoming bolder in their activities and the targets they choose. While increasing connectivity presents extensive economic and social benefits, the impact of cybercrime on Australia’s society and economy is so significant that a national response is imperative. The Australian Cyber Security Centre (ACSC) ACSC Annual Cyber Threat Report 1 July 2020 to 30 June 2021 highlighted that self-reported losses due to cybercrime totalled more than AU$33 billion during the 2020–21 financial year. This is stark compared to the 2013 National Plan to Combat Cybercrime, which estimated the cost of cybercrime in Australia to be $2 billion annually. And there are other immeasurable costs of cybercrime – no dollar value can reflect the immense harm caused to victims by all manner of cybercrime, such as the distribution of child abuse material, the spread of ransomware, or the compromise of personal information on a massive scale. The COVID-19 pandemic significantly increased Australian dependence on the internet as it enabled working remotely, provision of access to services and current information, facilitated communication with friends and family and allowed Australians to continue their daily lives. Alongside the benefits of using the digital and online environment, vulnerability has rapidly increased as cybercrime networks capitalised on these social trends. Cybercriminals adapt quickly to environmental changes and remain resilient to disruption by law enforcement. Cybercrime is a multifaceted threat, requiring multiple lines of effort to address it. Recognising the critical role state and territory law enforcement partners play in combating cybercrime, in cooperation with Commonwealth law enforcement, a nationally coordinated response is required to address the persistent challenge of cybercrime. Given the rapidly evolving nature of cybercrime, it is important that governments work closely with Australian businesses and the Australian community to empower them to remain vigilant and prepared as new cybercrime threats rapidly emerge. It is therefore more important than ever before to implement a clear, strong and effective cybercrime framework for Australia, where Government, industry and the community work together to build Australia’s resilience to cybercrime by fighting domestic and international cybercriminals and supporting victims of cybercrime. This National Plan provides a unifying vision to support ongoing and evolving action to combat cybercrime. To this end, it builds on the actions of the Commonwealth, state and territory governments, including initiatives delivered under Australia’s Cyber Security Strategy 2020, the Ransomware Action Plan, the National Strategy to Prevent and Respond to Child Sexual Abuse and the forthcoming National Plan to End Violence against Women and Children. National Plan to Combat Cybercrime 2022 2