Why Australia has an opportunity to lead
Australia is not starting from scratch. We have a solid foundation on which to become a world
leader in cyber security. It is on this foundation that we have built our Strategy.
One of Australia’s core strengths is our robust legislative system. Our strong legislative and
regulatory frameworks will help enforce new cyber security standards, while our ability to quickly
change these laws will help us adapt to meet our evolving cyber security needs. From regulation of
critical infrastructure under the Security of Critical Infrastructure Act 2018 (the SOCI Act) to the
protection of people, information and assets in the Australian Government under the Protective
Security Policy Framework and associated state and territory arrangements, the Australian
Government can access a suite of levers to enhance our national cyber security. We are well
placed to enact further legislative reform to achieve real whole-of-society changes.
Not only do we have strong laws, we also have strong defences. Australia has a wide range of
intelligence, defensive and offensive cyber capabilities to respond to serious cyber attacks.
The ASD works across the full spectrum of cyber operations to defend Australia from global threats
and advance our national interests. ASD acquires signals intelligence, provides proactive cyber
risk advice and assistance, and may deploy offensive cyber operations. These operations are
designed to deter, disrupt, degrade and deny adversaries where consistent with ASD’s existing
legislative and oversight framework, in addition to domestic and international law. The AFP leads
the investigation of serious and organised cybercrime activity impacting government, systems of
national significance, or the wider Australian economy.
The capabilities of ASD and AFP are also enabled by many other government agencies,
industry leaders and community groups. This includes our world-class research, education and
tech sectors, which are driving major technological advancements in cyber security and adjacent
fields. Australia has many globally successful technology companies and strong research
capabilities in critical technologies, including quantum, robotics and AI. Deep partnerships
between academia, industry and government mean that we can afford to raise our aspirations
about what Australia can achieve.
In our region, Australia is a trusted partner of choice. We place great value on a strong region and
collective capacity building. We have strengthened cyber resilience in our region by supporting
the establishment of national computer emergency response teams, assisting in the development
of new or strengthened national cyber strategies and legislation, delivering awareness-raising
campaigns promoting online safety, and advocating for global tech companies to take security
and safety more seriously.
Globally, Australia is a leading voice on cyber security. Through multilateral forums, we have
demonstrated a long-standing commitment to upholding the rules-based international order.
We have stood up for responsible state behaviour in cyberspace and called out instances of
malicious cyber activity by nation states. As a trusted voice on the international stage,
Australia has an opportunity to uplift global standards for cyber security.
These strengths are the backbone of our Strategy, and they fuel our vision for a more secure future.
By building on our strategic advantages and capturing new opportunities, Australia can become
a world leader in cyber security by 2030.
2023–2030 Australian Cyber Security Strategy
13