Data underpins how individuals, businesses or government communicate and conduct business but it is also vulnerable to being stolen or compromised by cyber criminals.

The development of Australia’s first National Data Security Action Plan was announced in May 2021 to define a framework for digital security as part of the Australian Data Strategy.

The Action Plan will take a phased approach to strengthen and coordinate data security policy across the Australian Government, State and Territory Governments and the broader economy.

To help develop the plan, the Department of Home Affairs has released a discussion paper for public consultation. This seeks to:

• Explore with industry, and state and territory governments how the government and business can position itself to meet data security expectations, now and into the future
• Consider how data security responsibilities are best assigned to keep Australians’ data safe
• Open discussion on how Government, businesses and individuals can share responsibility for data security in the future to get the best outcome for everyone.

The Government is seeking input on how it can best deliver and define a whole-of-economy approach to ensure data is appropriately secured, accountable and controlled.

Victorian Chamber’ Executive Director – Information and Communications Technology, Glenn Goodwin, has a unique perspective on digital security policy having worked across many industries and disciplines. He is part of the Australian Cyber Security Centre, Melbourne Joint Industry Advisory Board and is leading an ISO27001/ISM certification program for the Victorian Chamber.

Mr Goodwin said, “The cyber security industry needs to be laser-focused on hardening cyber defences for all sized governments and organisations.

“We know that compliance and certification is needed to provide a trust framework between entities, however the current patchwork of compliance initiatives imposed by government poorly uses our scarce cyber security professionals, creates mountains of paperwork, and is not efficient in making us more secure.

“A national data security policy that scales with the size and data requirements of businesses, creating a compliance program that is universally recognised amongst Australian organisations, is desperately needed to ensure we can take a front seat in the digital economy of tomorrow.

“We’d like all organisations to ensure their voices are heard by responding to the National Data Security Action Plan.”

The National Data Security Action Plan discussion paper is available here, and responses can be made here.