The cost of cybercrime is often expressed in terms of financial loss. This report argues that in order to invest the necessary resources in prevention and response, harm measurement must be widened to include practical, health, social, financial and legal impacts. The authors put forward a harm index for victims that measures of the relative...

This report examines the cyber security trends that will affect economies and societies in the year to come. It highlights the complexity of the cyber security landscape which is intensified by geopolitical tensions, emerging technologies, supply chain interdependencies and cyber crime sophistication. This increasing complexity has profound and far-reaching implications for organisations and nations.

Cybercrime is a persistent and disruptive threat, and the impact on small businesses and individuals are increasing. This report details how malicious state and non-state cyber actors are targeting Australian governments, critical infrastructure, businesses and individuals for the purposes of espionage, disruption and financial gain. The report offers recommendations for individuals, organisations and critical infrastructure...

This discussion paper seeks to canvass options for an Australian ‘cyber intelligence and information militia’. The discussion is focused on structural and organisational issues regarding such a body, as well as the roles it can play, the risks involved and the key legal considerations.

The objective of this audit was to assess the effectiveness of the implementation of arrangements for managing cyber security incidents in accordance with the Protective Security Policy Framework and relevant ASD Cyber Security Guidelines. The audit finds that neither AUSTRAC or Services Australia are well placed to ensure business continuity or disaster recovery in the...