This report identifies and describes key cyber security threats targeting Australian systems and networks, and provides a range of examples and real-world case studies of malicious activity targeting Australian networks, between July 2019 and June 2020. It provides mitigation advice that all Australians and organisations can take to defend against these threats.

Encrypted communications are becoming ubiquitous, while the global encryption policy landscape is fracturing. Policymakers around the world must adapt their approaches to balance safety, security and privacy more deftly, as national choices have international impact.

Australian governments are the nation’s largest spenders on ICT, but they’re failing to maximise the leverage that market power gives them to drive improved cybersecurity and more secure supply chains. This study is based on interviews with key stakeholders in government and industry, and a review of openly available material on government procurement approaches.

Through this strategy, the Australian government will attempt to build trust in the online world by supporting businesses’ cyber resilience, including by sharing threat information, setting clear expectations of roles and strengthening partnerships.

This paper explores the concept of ‘clean pipes’, which is the idea that internet service providers (ISPs) could provide security services to their customers to deliver a better level of default security.