Contents Minister’s foreword 4 Executive summary: Our 2030 Vision 6 Strategic context 11 Why we must act now 12 Why Australia has an opportunity to lead 13 Our Strategy 15 Shield 1: Strong businesses and citizens 16 1. Support small and medium businesses to strengthen their cyber security 18 2. Help Australians defend themselves from cyber threats 19 3. Disrupt and deter cyber threat actors from attacking Australia 20 4. Work with industry to break the ransomware business model 22 5. Provide clear cyber guidance for businesses  23 6. Make it easier for Australian businesses to access advice and support after a cyber incident 25 7. Secure our identities and provide better support to victims of identity theft 26 Shield 2: Safe technology 28 8. Ensure Australians can trust their digital products and software 29 9. Protect our most valuable datasets 31 10. Promote the safe use of emerging technology 32 Shield 3: World-class threat sharing and blocking 34 1 1. Create a whole-of-economy threat intelligence network 35 12. Scale threat blocking capabilities to stop cyber attacks 37 Shield 4: Protected critical infrastructure 38 13. Clarify the scope of critical infrastructure regulation 40 14. Strengthen cyber security obligations and compliance for critical infrastructure 41 15. Uplift cyber security of the Commonwealth Government 42 16. Pressure-test our critical infrastructure to identify vulnerabilities 44 Shield 5: Sovereign capabilities 46 17. Grow and professionalise our national cyber workforce 47 18. Accelerate our local cyber industry, research and innovation 50 Shield 6: Resilient region and global leadership 52 19. Support a cyber resilient region as the partner of choice 53 20. Shape, uphold and defend international cyber rules, norms and standards 55 Next steps: Implementation and evaluation 57 How we will ensure we are on track to deliver57 Appendix A: List of acronyms 59 2023–2030 Australian Cyber Security Strategy 3