Australian Cyber Security Centre

Australian Cyber Security Centre
Name	Australian Cyber Security Centre
Formation	2014
Jurisdiction	Canberra, Australian Capital Territory
Parent agency	Australian Signals Directorate
Headquarters	Canberra
Chief1 name	Mike Burgess
Chief1 position	Director-General (ASD)

Australian Cyber Security Centre The Australian Cyber Security Centre is a national cybersecurity coordination body established to respond to cybercrime, cyber espionage, and critical infrastructure threats affecting Australia. It operates within the Australian Signals Directorate to support agencies such as the Australian Federal Police, Australian Security Intelligence Organisation, Department of Defence, and Australian Criminal Intelligence Commission while engaging with private sector partners including ASX, Telstra, Optus, and Commonwealth Bank.

Overview

The Centre provides incident response, threat intelligence, public guidance, and coordination across federal entities like the Attorney-General's Department, Department of Home Affairs, Department of Infrastructure, Transport, Regional Development and Communications, and state bodies such as New South Wales Police Force, Victoria Police, Queensland Police Service, alongside industry groups like Australian Financial Complaints Authority, AustCyber, Council of Small Business Organisations Australia. It integrates capabilities drawn from the Australian Security Intelligence Organisation, Defence Science and Technology Group, Australian Federal Police Specialist Response, Australian Border Force and academic partners including Australian National University, University of Melbourne, University of Sydney and Monash University.

History and Establishment

Origins trace to joint efforts after high-profile incidents involving multinational actors like China Telecommunications-related espionage allegations, NotPetya-style ransomware, and breaches affecting corporations such as Optus and Medibank. Predecessors included units within the Australian Signals Directorate and programs from the Department of Defence and Attorney-General's Department. The formal establishment in 2014 aligned with national strategies including the Australian Cyber Security Strategy 2016–2021 and later policy documents such as the 2020 Cyber Security Strategy and the 2023 National Cyber Security Strategy update.

Structure and Governance

Governance rests with the Australian Signals Directorate under leadership connected to agencies like the Prime Minister's Office, Minister for Home Affairs, and the Treasury. Operational elements coordinate across networks like the Integrated Intelligence Centre and regional nodes in capitals including Sydney, Melbourne, Brisbane, Perth, Adelaide, and Hobart. It liaises with statutory bodies including the Australian Communications and Media Authority, Office of the Australian Information Commissioner, Digital Transformation Agency, and regulators such as Australian Prudential Regulation Authority and Australian Securities and Investments Commission.

Roles and Functions

Primary functions include cyber incident response, threat intelligence sharing, vulnerability coordination, and public awareness campaigns aligned with frameworks like the Essential Eight and standards from International Organization for Standardization such as ISO/IEC 27001. It supports sector-specific regulators for energy networks overseen by the Australian Energy Market Operator and Australian Energy Regulator, financial sectors regulated by Reserve Bank of Australia and Australian Securities Exchange, health sectors tied to Department of Health and Aged Care and Therapeutic Goods Administration, and supply chain oversight linked to Department of Defence procurement and Australian Strategic Policy Institute analyses.

Major Programs and Initiatives

Programs include proactive threat hunting, the Joint Cyber Security Centres with state governments and industry partners, the Australian Cyber Security Hotline, and public guidance such as Stay Smart Online in coordination with Stay Smart Online Advisory Board members from Big Four accounting firms and law firms including King & Wood Mallesons. Initiatives extend to workforce development via partnerships with TAFE, vocational pathways under Australian Qualifications Framework, scholarship programs linked to STEM outreach with institutions like CSIRO, Data61, and university consortiums. Other initiatives engage standards bodies like Australian/New Zealand ISO committees and international frameworks such as NATO Cooperative Cyber Defence Centre of Excellence.

Incidents and Responses

The Centre has coordinated responses to ransomware events impacting entities such as Medibank Private and Optus, nation-state intrusion investigations linked to reports citing actors like advanced persistent threat groups implicated in incidents similar to those involving SolarWinds, Hafnium, and Fancy Bear. It has supported law enforcement operations resulting in actions by the Australian Federal Police and prosecutions under the Criminal Code Act 1995 (Cth). Responses involved collaboration with international partners including United States Cyber Command, National Security Agency, UK National Cyber Security Centre, Canadian Centre for Cyber Security, Five Eyes allies, and multinational firms like Microsoft, Google, Amazon Web Services, CrowdStrike, Palo Alto Networks.

Partnerships and International Engagement

International engagement includes partnerships with United States Department of Homeland Security, Department of Defense (United States), European Union Agency for Cybersecurity, Interpol, Europol, APNIC, and regional bodies such as the Pacific Islands Forum and ASEAN. Domestic partnerships span telecommunications companies like Vodafone Australia, TPG Telecom, cloud providers like Microsoft Azure, Google Cloud Platform, and cybersecurity vendors including Symantec, FireEye, Checkpoint Software Technologies, alongside insurance industry associations such as the Australian and New Zealand Institute of Insurance and Finance.

Category:National cyber security agencies