- allow the minister for cyber security to prescribe obligatory cyber security requirements for sensible units to present Australians assurance the units they buy aren’t placing them in danger,
- require sure companies to report ransom funds, so our cyber consultants can construct a greater image of the menace panorama,
- give impact to a ‘restricted use’ obligation for the Nationwide Cyber Safety Coordinator and the Australian Alerts Directorate (ASD) to facilitate speedy and open sharing of data throughout a cyber security incident,
- set up a Cyber Incident Evaluate Board (CIRB) to conduct no-fault, post-incident opinions of great cyber security incidents in Australia and make concrete suggestions to help within the prevention, detection, response, and minimisation of cyber incidents sooner or later.
“I additionally welcome the limited-use provisions on this laws, which can present assurance to entities that the data they open up to authorities about cyber incidents won’t be used towards their pursuits sooner or later,” Senator and Shadow Minister for Cyber Safety James Paterson stated. “We want seamless, time-sensitive sharing of data between authorities and enterprise when there’s a cyberattack. We will’t afford for any CISO or their CEO to hesitate to choose up the cellphone to the ACSC and share what they know.”
Patterson stated that it is very important study the correct classes from main incidents and apply these classes. “Two years on from the data breaches suffered by Optus and Medibank, we’re nonetheless at the hours of darkness concerning the specifics of what led to those incidents, how they have been managed and what firms can study from the incidents to protect towards future cyberattacks of an analogous nature.”
The Cyber Safety Invoice 2024 was launched on 9 October and was later advisable for pressing parliamentary approval on 19 November by the Parliamentary Joint Committee on Intelligence and Safety (PJCIS).
