Australia: Cybersecurity

APRA and ASIC have called on regulated entities to demonstrate that their governance, cyber controls, operational resilience and third-party risk arrangements can operate at frontier-AI speed.

Almost a year after the Government announced that it agreed or agreed in-principle with 106 of the 116 recommended reforms in the Attorney-General’s Department Privacy Act Review Report 2022...

APRA’s most recent accountability enforcement action against Bendigo and Adelaide Bank (BAB) for failures to address known cyber weaknesses within its group demonstrates how seriously it takes cyber risk management.

In an open letter published on 8 May 2026, ASIC, who are responsible for regulating Australia's corporate, financial services and insurance sectors, urged Australian financial services licence (AFSL) holders to act promptly against the risks posed by advanced AI systems. ASIC warned that malicious actors are increasingly using cutting-edge AI models to identify and exploit vulnerabilities at an unprecedented scale.

Australia's Department of Home Affairs has released proposed changes to the Security of Critical Infrastructure Act 2018 following an independent review. The amendments introduce enhanced obligations for high-risk asset classes, including stricter cyber security requirements, supply chain vulnerability mapping, and personnel security measures. Organizations managing critical infrastructure assets must now prepare for comprehensive regulatory changes that will fundamentally reshape how they protect essential

In a key decision against an Australian financial services licence (AFSL) holder, the Federal Court of Australia has ordered the AFSL holder to pay AU$2.5 million in penalties for inadequate cybersecurity measures.

Guide to taking reasonable steps to implement practices, procedures and systems to protect your business' data, and that of your customers and clients, from misuse, interference and loss.

Welcome to the latest edition of our global cyber and data newsletter, focusing on the latest developments in data protection, AI, cyber incident response, and digital regulations.

If you have just one podcast on your holiday listening list, this is it — our Cross Examining Cyber: 2025 Summer Wrapped Podcast Special.