2. Identify and protect critical systems across government Government investments in cyber security must be focused on the systems that are most critical to our national interests, economic prosperity and social cohesion. To help prioritise our investments, we will designate ‘Systems of Government Significance’ that need to be protected with higher security standards. We will map the Government’s most important digital infrastructure, assessing the level of impact if these systems were disrupted. 3. Uplift the cyber skills of the Australian Public Service (APS) The APS play a critical role in driving the cyber security posture across government. The Government will invest in developing the cyber skills of the APS, establishing a federated approach to growing and managing our in-house cyber capabilities. 16 Pressure-test our critical infrastructure to identify vulnerabilities The problem we face While this Strategy will better equip Australian citizens and businesses to protect themselves from cyber attacks, malicious actors will continue to identify and target vulnerabilities. To counter this, we need to stay ahead of the threat – we need to pressure-test our critical infrastructure to identify potential vulnerabilities before they are exploited. All businesses should ensure that they are appropriately prepared to defend, respond to and recover from a cyber incident. However, the importance of critical infrastructure to maintain essential services necessitates a heightened level of readiness. In addition to identifying vulnerabilities in our networks, we also need to rehearse our incident response plans so that we are prepared for cyber incidents when they occur. By testing our national coordination mechanisms, it will be easier to get help and resume business continuity after an incident. How will the Government take action The Australian Government will build our national cyber readiness by proactively identifying and closing gaps in our cyber defences and incident response plans. Under this initiative, the Government will: 1. Conduct national cyber security exercises across the economy The Cyber Coordinator will lead a National Cyber Exercise Program, exercising the full spectrum of incidence response plans, consequence management and communications channels. Engaging closely across all sectors, the Government will exercise cyber incident scenarios to test established processes to support businesses and the economy in the event of an incident. These exercises will ensure that cyber crisis arrangements are understood, integrated and rehearsed. 44 2023–2030 Australian Cyber Security Strategy