Policy Focus: Cyber security solutions for local government
Cyber security is critical for local government to meet the needs of their communities, as highlighted by new research we recently commissioned:
- 74 per cent of cyber breaches were caused by the human element
- 54 per cent of Australian companies were hit by ransomware attacks in 2024
- Councils faced an average cost of $1 million to $2 million for each data breach
- As the managers of $643 billion in assets, local government is a high-risk industry that is currently under protected.
Cyber security risks are often invisible, and it is easy to overlook cyber security protocols as being overly cautious.
However, cyber attacks pose a growing threat to local governments, which are among the largest holders of sensitive data in Australia.
Beyond loss of trust and data, cyber attacks can also lead to the shutdown of critical digital infrastructure, such as websites and our significant assets.
However local government isn’t alone in the risk cyber attacks pose. About 90 per cent of Victorian Government entities faced a cyber security attack in 2022 and there were 94,000 reported cybercrimes in the 2022-23 financial year according to the Australian Signals Directorate (ASD), the federal government’s cyber security body.
The uptake of new technology offers many benefits to councils. Cloud-based services and artificial intelligence offer our sector the opportunity to be more productive and deliver faster services. Balancing those dividends with an understanding of best practice in the cyber security space can guarantee continued community trust and the security of valuable data.
The Federal Government offers many free programs and resources to help build up a better understanding of cyber security best practice and to improve the capability of local governments to prepare for cyber threats.
Federal Government Partnership Program
ASD provides a free partnership service to local government, providing monthly updates on cyber threats, events and training opportunities.
Guide to Incident Response Plans – ASD
Provides a best practice guide on how to plan for cyber security incidents.
Cyber-attacks are constantly evolving and becoming smarter, making it critically important to report breaches.
Other resources:
A guide to ‘Cyber Supply Chains’ – ASD
Advice on Cloud Computing Services – ASD
Cyber Security Guidelines for Local Government – NSW Government