Business and government must work together to boost Australia's cyber security, Innes Willox, Chief Executive of the national employer association, Ai Group, said today in a submission to the 2023-2030 Australian Cyber Security Strategy.
"Australian industry is already affected by cyber threats, and as security challenges grow, it is imperative business and government work together for cyber capability uplift," Mr Willox said.
"Industry is already investing heavily in cyber capabilities, but its efforts are limited by the depth and breadth of the national cyber ecosystem.
"Growing our national capability and skills base is the best enabler of cyber uplift in business.
"It will take increased investment in technology and workforce digital skills, but we have the ability to increase Australia's competitiveness by developing an internationally trusted cyber ecosystem in which business can thrive.
"We look forward to working with government in a collaborative manner and urge them to provide resources, support increased capability and invest in Australian workforce skills," Mr Willox said.
Key points:
- Australian industry is actively investing in cyber security, however there is a wide range of cyber capabilities between businesses. Gaps remain particularly for smaller enterprises and more traditional industry subsectors.
- There are major opportunities for Australia to become a leading cyber capable nation, but it will require targeted investments. Developing the cyber capability and digital skills of the workforce – both for specialist and generalist roles – will be critical, as will building the depth of the national cyber ecosystem.
- Regulatory measures should consider the balance of security and business innovation. Businesses facing cyberattacks are victims and should be treated as such. Regulation should be designed in a way that is practical for widespread uptake among industry and supports broader digital upgrading.
- Collaborative government support is also needed to help uplift cyber capability, particularly for smaller businesses. Investments in informational resources, skills, incident recovery and ecosystem development will all augment current efforts by industry.
Full submission available here
