Compliance Framework
Compliance Driver
Cyber Security Act 2024 (Cth)
Classification
Level 1
University-wide concern. Impacts on reputation and funding.
Associated Legislation
Associated Standards
None
Associated Codes
None
Associated Information
None
Return to Top
Administrative Information
Administrative Body
Administrative Name
Administrative Address
Administrative Phone
Administrative Email
Administrative Website
Return to Top
General Introduction
VC Compliance Delegate
Neil Durrant, Executive Director Future Students, Engagement and Technology
Compliance Coordinator
Tim Hume, Chief Information and Digital Officer
Business Units Impacted
Overview
The Cyber Security Act 2024 establishes a framework for improving national cyber security. It introduces mandatory security standards for certain internet-connectable products, reporting obligations for ransomware payments, and a "limited use" framework for information shared with the National Cyber Security Coordinator. It also establishes a Cyber Incident Review Board.
In relation to mandatory ransomware and cyber extortion reporting the University is required to report ransomware payments to the Commonwealth within 72 hours.
Compliance Overview