Public-private partnerships in action As recently announced by the Prime Minister and Microsoft on 24 October 2023, Microsoft will be investing $5 billion into the Australian technology and cyber security industry. A key element of this investment will be the co-led Microsoft-ASD Cyber Shield (MACS) which will further enhance existing efforts to increase national threat intelligence capabilities with a focus on detecting, analysing and defending Australia from sophisticated nation-state cyber threats. Other key elements of this investment include investing in digital infrastructure to support the growing demand for cloud computing services, investment to seize the opportunity AI offers, partnering with TAFE NSW to deliver a Microsoft Datacentre Academy to support this digital infrastructure and AI investment. These initiatives demonstrate how industry and government can work together to deliver a beneficial outcome for all Australians. 11 Create a whole-of-economy threat intelligence network The problem we face As cyber threats grow in scale and sophistication, a whole-of-economy threat picture is critical to build preparedness and mitigate risk. Existing initiatives, such as ASD’s intelligence threat sharing platforms and the Cyber and Infrastructure Security Centre’s Trusted Information Sharing Network, enable multi-directional government–industry and industry–industry threat intelligence sharing. However, industry has highlighted the need to improve national mechanisms to share strategic and tactical threat intelligence. Industry-led threat intelligence sharing platforms continue to develop, including Intelligence Sharing and Analysis Centres (ISACs). However, more action is needed to promote cross-sectoral threat-intelligence sharing across industry. Some sectors have mature arrangements in place, such as the financial sector. Others, like the health sector, have less capability to share, receive or act on cyber threat information, leaving large parts of the economy lacking a comprehensive threat picture. 2023–2030 Australian Cyber Security Strategy 35

Select target paragraph3