One of the areas Boyle said needed further attention was the development of a cybersecurity culture.
"We need the Australian public and private sectors to move beyond a tickbox compliance culture when considering cybersecurity risks. This was highlighted in the review of the eCensus failings last year. Organisations focussed on complying with just audits and following safety checklists could harm their security by ignoring evolving cyber-threats," he said. "We need to focus on understanding our own organisational risks"
Boyle also noted that resilience is under-considered. While we can take all possible steps to reduce the risk of an attack we need to be ready for a breach or incident to occur and have a plan in place to react accordingly.
From the government's side, a number of communication efforts have been initiated and continue. The ASCS is relocating from the Ben Chifley Building in Canberra's parliamentary district to Brindabella to make it more accessible to private companies and citizens. And a new cybersecurity centre has opened in Brisbane with other cities to follow. This will be a place for cybersecurity experts, businesses and law enforcement to work together.
Sign up for Computerworld eNewsletters.