Can Australia’s 2023–2030 Cyber Security Strategy Safeguard Its Nuclear and Space Security?

Sep 15

14 min read

Executive Summary

Cybersecurity has become a critical national priority as societies increasingly depend on digital technologies for economic activity, governance, and social interaction. Australia has responded to the evolving cyber threat landscape through the 2023–2030 Australian Cyber Security Strategy (Home Affairs, Gov, AU, 2023-2030), which aims to position the country as a global leader in cyber security by 2030. The strategy introduces a layered framework of six cyber shields designed to protect citizens, businesses, critical infrastructure, and national interests.

Figure 1 - Six Shields of Australian Cyber Security Strategy 2023-2030

This article evaluates Australia’s cybersecurity strategy by analysing the institutions involved in implementing the strategy, highlighting the importance of agencies such as the Australian Signals Directorate (ASD, 2026), Australian Federal Police (AFP, 2026), and the Department of Home Affairs (DHA, 2026).

Furthermore, the article discusses a recent cyber incident in Australia and the government’s response mechanisms. The study also reviews Australia’s international collaborations in cyber security, particularly with partners such as the Five Eyes (US, UK, Canada, NZ, AU), AUKUS, Quad (India), and intense capacity building in Southeast Asia and the Pacific. Finally, the paper evaluates whether the strategy can effectively safeguard Australia’s space and nuclear security and proposes additional policy recommendations to enhance its effectiveness.

Introduction

In recent years, cyber threats have become one of the most significant security challenges faced by modern states. As evident from the table below, Australia is one of the world’s most digitally connected economies, making it an attractive target for cybercriminals, hacktivists, and state-sponsored cyber actors.

Year (Financial Year)	Cybercrime Reports in Australia	Average Frequency of Reports	Major Industry/Sector Targeted
2020–2021	~67,500 cybercrime reports	1 report every 8 minutes	Healthcare, Government services, Small businesses
2021–2022	76,000+ cybercrime reports	1 report every 7 minutes	Financial services, Online retail, Critical infrastructure
2022–2023	~94,000 cybercrime reports	1 report every 6 minutes	Telecommunications, Government databases, Education sector
2023–2024	87,400 cybercrime reports	1 report every 6 minutes	Banking, Digital payment systems, Online marketplaces
2024–2025	84,700 cybercrime reports	1 report every 6 minutes	Critical infrastructure, Energy sector, Telecommunications networks

Table 1 - 2020-2025 Cybercrimes | Source: Australian Signals Directorate ASD’s Reports

To address these growing risks, the Australian Government introduced the 2023–2030 Australian Cyber Security Strategy, which outlines a comprehensive framework to strengthen national cyber resilience and protect citizens and businesses from cyber threats. The strategy establishes a long-term vision of making Australia a world leader in cyber security by 2030, while simultaneously enhancing economic growth and technological innovation by collaborating with national and international organisations and countries.

Global, Regional, and Domestic Context for the Cybersecurity Strategy

Global Context

The global cyber landscape has evolved rapidly, with cyber-attacks becoming more sophisticated, frequent, and damaging as the table below shows:

Year	United States (USD)	United Kingdom (USD)	China (USD)	Japan (USD)	Australia (USD)	India (USD)
2020	~$4.2 billion reported losses	~$2.3 billion estimated losses	~$60 billion estimated cybercrime damage	~$3 billion estimated losses	~$2.7 billion	~$1.25 billion
2021	~$6.9 billion	~$3.1 billion	~$70 billion	~$3.5 billion	~$3.1 billion	~$1.6 billion
2022	~$10.3 billion	~$3.8 billion	~$80 billion	~$4.1 billion	~$3.7 billion	~$2.2 billion
2023	~$12.5 billion	~$4.3 billion	~$90 billion	~$4.5 billion	~$4.1 billion	~$2.7 billion
2024	$16 billion	~$5.0 billion	~$100 billion	~$5 billion	~$4.5 billion	~$2.8 billion

Table 2 - Global Cybercrime Costs | Sources: (FBI USA, 2025), (CSV, 2025)

Key Insights:

Cybercrime losses are rising globally across both developed and emerging economies, demonstrating the expanding scale of cyber threats.
The United States reports the highest financial losses, exceeding $16 billion in reported cybercrime damages in 2024, according to the FBI Internet Crime Complaint Center. (FBI USA, 2025)
Globally, cybercrime damages are expected to reach $10.5 trillion annually by 2025, making cybercrime one of the largest economic threats worldwide. (CSV, 2025)
Rapid digitalisation in countries such as India, China, and Australia has increased exposure to cyber threats, particularly through online banking, digital commerce, and government services.

Below table shows that the top global cyber threats have caused multi-countries infrastructure attacks.

Year	Most Prevalent Cyber Threats	Global Incidents
2019	Phishing, Malware, State-sponsored espionage (DBIR, 2020)	US government agencies and corporations targeted by state-sponsored hackers.
2020	Ransomware, Supply-chain attacks, Phishing (ENISA, 2020)	SolarWinds supply-chain attack affecting global government networks.
2021	Ransomware-as-a-Service, Critical infrastructure attacks (IBM, 2021)	Colonial Pipeline ransomware attack disrupting US fuel supply.
2022	Data breaches, Cyber espionage, Distributed Denial of Service (DDoS) (WEF, 2023)	Optus data breach (Australia) and cyber operations linked to geopolitical conflicts.
2023–2024	AI-enabled cyber-attacks, Identity theft, Critical infrastructure targeting (ENISA, 2023–2024)	Attacks on energy grids, logistics companies, and financial institutions globally.

Table 3 - Top Global Cyber Threat Types (2019–2024)

Australia faces threats from both criminal organisations and state-sponsored cyber actors seeking to steal data, disrupt infrastructure, and undermine national sovereignty. The interconnected nature of global digital systems means that cyber incidents in one country can have cascading effects across borders, as shown in the below table. These global risks necessitated a comprehensive cybersecurity strategy to protect national systems and contribute to global cyber stability.

Year	Incident & Source	Primary Target Country	Secondary / Tertiary Impacted Countries	Type of Cyber Attack	Cascading Global Impact
2020	SolarWinds Supply Chain Attack *(ENISA CISA, 2021)*	United States	United Kingdom, Canada, Australia, European Union member states, Japan	Supply-chain cyber espionage	Malicious software updates infected 18,000+ organisations globally, including government agencies and corporations. One of the largest cyber espionage campaigns recorded.
2021	Colonial Pipeline Ransomware Attack *(FBI, Dept of Homeland Security, 2021)*	United States	Canada, Mexico, global fuel markets	Ransomware attack	Shutdown of a major fuel pipeline disrupted fuel supply across the US East Coast, creating ripple effects in global energy markets.
2021	Microsoft Exchange Server Hack *(Microsoft Security Response Center; CISA, 2021)*	United States	United Kingdom, Germany, Australia, India, Japan	State-sponsored cyber espionage	Exploited vulnerabilities affecting 30,000+ organisations worldwide, including governments and corporations.
2022	Viasat Satellite Network Cyberattack *(ENISA, 2023–2024)*	Ukraine	Germany, Poland, France, Italy	Cyber sabotage targeting satellite communications	Satellite network disruption affected military communications and thousands of wind turbines in Germany, showing cascading infrastructure effects.
2023	MOVEit File Transfer Supply Chain Attack (CISA, 2023)	United States	United Kingdom, Canada, Australia, Netherlands, Germany	Data breach / supply chain attack	Vulnerability in file transfer software compromised hundreds of organisations globally, including government agencies and financial institutions.
2024	DP World Port Cyber Incident (AU Gov, 2024)	Australia	Singapore, Malaysia, China, Japan, global shipping networks	Cyber intrusion disrupting logistics infrastructure	Shutdown of major Australian ports disrupted international cargo movement and supply chains across Asia-Pacific.
2025	Change Healthcare Ransomware Attack (US DHHS, 2025)	United States	Canada, United Kingdom, Australia, global healthcare payment networks	Ransomware / critical healthcare infrastructure attack	Attack on a major healthcare payment processor disrupted medical billing, pharmacy services, and hospital systems across multiple countries, affecting millions of patients.

Table 4 - Major Global Cyber Incidents with Cascading Cross-Border Impacts (2020–2025)

Regional Context

Australia operates within the Indo-Pacific region, where digital connectivity is increasing rapidly. Many regional countries are undergoing digital transformation, which presents both opportunities and vulnerabilities.

Weak cybersecurity capabilities in neighbouring states can create risks for Australia, as cybercriminals often exploit weaker networks as entry points for broader attacks, as evident from the below table for comparative data table showing cyber readiness/capability levels across Indo-Pacific countries. This clearly demonstrates that varying cybersecurity maturity levels in neighbouring states can create regional vulnerabilities.

Country	Cybersecurity Maturity Level (ITU Global Cybersecurity Index Score /100)	Level of Preparedness	Key Regional Significance
Australia	99.6	Very High	One of the most cyber-prepared nations globally, leading regional cyber capacity-building programs.
Singapore	98.5	Very High	Regional cybersecurity hub with advanced national cyber defence capabilities.
Japan	97.5	Very High	Strong cyber resilience supporting regional digital infrastructure and global supply chains.
India	93.7	High	Rapid digital transformation with increasing investment in cyber defence and CERT capabilities.
Malaysia	89.5	High	Emerging cybersecurity framework supporting ASEAN digital economy.
Indonesia	84.2	Moderate–High	Rapidly expanding digital economy but facing cybersecurity capability gaps.
Vietnam	82.1	Moderate–High	Growing technology sector but still developing national cyber defence systems.
Philippines	77.6	Moderate	Increasing digital connectivity but limited cybersecurity resources.
Thailand	75.4	Moderate	Strengthening cybersecurity legislation and regional cooperation.
Pacific Island States (average)	45–60	Low–Moderate	Limited cybersecurity infrastructure and resources, creating potential entry points for cyber threats affecting regional networks.

Table 5 - Cybersecurity Capability Levels in the Indo-Pacific Region (2020–2024) | Source: ITU GCI 2024

Australia has therefore prioritised regional cyber resilience through cooperation with Pacific and Southeast Asian nations. Strengthening cyber capacity in neighbouring countries helps ensure a stable digital environment and protects shared economic and security interests.

Domestic Context

Domestically, Australia has experienced a significant increase in cybercrime incidents affecting both individuals and businesses. Cybercrime occurs frequently, with incidents reported every few minutes. Ransomware attacks and data breaches have caused significant economic losses and exposed sensitive personal information of millions of Australians.

Figure 2 - Cybercrime Reports in Australia (2019–2025) | Source: (ASD, 2024-2025)

These incidents highlighted weaknesses in organisational cyber security practices and the need for stronger national coordination. The economic cost of cybercrime and the growing reliance on digital technologies created strong pressure on the government to develop a comprehensive cybersecurity framework.

Consequences Leading to Strategy Adoption

Several consequences drove the adoption of the cybersecurity strategy:

1. Rising cybercrime incidents affecting citizens and businesses.

2. Increasing economic losses due to cyberattacks.

3. Threats to critical infrastructure and government systems.

4. Rapid technological advancements creating new cyber vulnerabilities.

5. Growing geopolitical tensions and cyber espionage activities.

Together, these factors created an urgent need for a coordinated national approach to cybersecurity.

Role of Institutions in Developing the Cybersecurity Strategy

Australia’s cybersecurity strategy involves multiple government institutions responsible for policy development, threat detection, law enforcement, and international cooperation.

Figure 3 - Institutions in Developing the Australia's Cybersecurity Strategy

Department of Home Affairs (DHA, 2026)

The Department of Home Affairs plays a central role in coordinating national cybersecurity policy. It oversees the implementation of the strategy and works closely with industry partners to develop regulatory frameworks and cyber resilience initiatives.

Australian Federal Police (AFP, 2026)

The AFP investigates serious cybercrime and conducts operations against cybercriminal networks. It also collaborates with international law enforcement agencies to disrupt cybercrime groups operating across borders.

Department of Foreign Affairs and Trade (DFAT, 2026)

DFAT is responsible for Australia’s international cyber diplomacy. It works with global partners to establish international cyber norms and strengthen regional cyber resilience.

Most Vital Institution: Australian Signals Directorate (ASD, 2026)

Among these institutions, the Australian Signals Directorate (ASD) is arguably the most vital for national security. Below figure depicts the 7 main functions of ASD:

Figure 4 - Strategic reasons why ASD is the most vital institution

ASD provides intelligence, defensive capabilities, and offensive cyber operations that help detect and neutralise cyber threats before they cause damage. Its technical expertise and operational capabilities make it a cornerstone of Australia’s cyber defence framework, as explained via the table below:

Strategic Function	ASD Department / Sub-Organisation (or Supporting Agency)	Role in Supporting the Function
1. Core Intelligence Authority	Signals Intelligence Division (SIGINT) – ASD	Responsible for collecting, analysing, and interpreting signals intelligence from foreign communications and digital systems to identify cyber threats and national security risks.
2. Integration within the National Defence Structure	Department of Defence (ASD is part of Defence Portfolio) and Defence Intelligence Organisation (DIO)	ASD operates under the Australian Department of Defence, allowing cyber intelligence and operations to be integrated into national military strategy and defence planning.
3. Operational Control over Cyber Defence Infrastructure	Australian Cyber Security Centre (ACSC)	The ACSC is operated by ASD and serves as Australia’s national cyber defence hub, coordinating threat intelligence, incident response, and cybersecurity guidance for government and industry.
4. Offensive Cyber Capabilities	ASD Offensive Cyber Operations Division (often coordinated with Australian Defence Force cyber units)	Conducts authorised offensive cyber operations to disrupt, deter, or neutralise cyber threats posed by hostile actors and adversarial states.
5. Influence within the Five Eyes Intelligence Alliance	ASD International Engagement & Intelligence Partnerships with NSA (USA), GCHQ (UK), CSE (Canada), and GCSB (New Zealand)	Facilitates intelligence sharing, joint cyber operations, and coordinated threat assessments through the Five Eyes alliance.
6. Strategic Role in Foreign Policy and Geopolitical Competition	Department of Foreign Affairs and Trade (DFAT) – Cyber Affairs Branch working with ASD	ASD provides cyber intelligence that informs Australia’s diplomatic strategies, cyber norms negotiations, and regional cybersecurity cooperation initiatives.
7. Protection of Critical National Infrastructure	ASD / ACSC Critical Infrastructure Security Program and Department of Home Affairs – Security of Critical Infrastructure (SOCI) Division	Provides threat monitoring, risk assessments, and security guidance to protect sectors such as energy, telecommunications, finance, healthcare, and transport infrastructure.

Table 6 - Institutional Mapping of ASD Strategic Functions | Source: (ASD CP, 2026)

Below figure illustrates the governance hierarchy underpinning Australia’s cybersecurity framework. Strategic decisions originate from the Prime Minister and National Security Committee and flow through the Department of Defence to the Australian Signals Directorate, which serves as the central intelligence and cyber operations authority. The Australian Cyber Security Centre then operationalizes these strategies by coordinating cyber Defence efforts across critical infrastructure sectors and private industry.

Figure 5 - Governance Structure of Australia's Cybersecurity Strategy | Source: (ASD CP, 2026)

Unique Characteristics of Australia’s Cyber Security Strategy (2023–2030)

Australia’s Cyber Security Strategy 2023–2030 demonstrates several distinctive structural and strategic characteristics compared with other national cyber policies. While many countries emphasise resilience and partnerships, Australia’s strategy is notable for integrating domestic protection, economic security, and regional cyber leadership within a single framework (AU Gov, 2024).

Six-Shield Framework

A key distinguishing feature is the “Six-Shield” architecture, which organises the national cyber strategy into interconnected layers of protection:

Figure 6 - The six ‘Cyber Shields’ | Source: (Home Affairs, Gov, AU, 2023-2030)

This structured layered defence model is uncommon among other national strategies, which typically rely on policy pillars rather than operational shield frameworks.

Country	Strategy Structure	Key Difference
Australia (2023)	Six Cyber Shields	Layered defence linking domestic, infrastructure, and global cybersecurity
United States (2023)	Five strategic pillars	Policy-oriented framework without shield architecture
United Kingdom (2022)	Five pillars	Focus on resilience and leadership rather than layered protection model
European Union (2020)	Strategic priorities	Emphasis on digital sovereignty and resilience

Table 7 - key distinguishing feature is the “Six-Shield” architecture

Sources: (Home Affairs, Gov, AU, 2023-2030; FBI USA, 2025; UK Gov, 2022-2030; European Commission, 2020-2025)

Integrated Public–Private Cybersecurity Ecosystem

Another distinctive element is the centralised public–private collaboration model led by the Australian Cyber Security Centre (ACSC, 2026), which operates under the Australian Signals Directorate. The ACSC functions as a national operational hub for cyber intelligence sharing, incident response, and industry coordination, bringing together government agencies, critical infrastructure operators, and private cybersecurity organisations (ACSC, 2026). While other countries maintain industry partnerships, Australia’s model is more centralised in a single national cyber coordination centre.

Regional Cyber Leadership in the Indo-Pacific

Australia’s strategy also emphasises regional cyber capacity-building, particularly for Pacific Island and Southeast Asian countries. This reflects the recognition that weak cybersecurity capabilities in neighbouring states can create entry points for cyber threats affecting Australia’s national systems (DFAT, 2026).

Overall, the strategy’s combination of a structured defence framework, centralised cyber coordination, and regional cyber diplomacy distinguishes Australia’s approach from many other national cybersecurity policies.

Recent Cybercrime Case in Australia and Government Response

Recent cyber-attacks against the Australian Defence Force (ADF) have primarily targeted supply chain partners rather than direct military networks, with major incidents occurring in late 2025.

Key Recent Incidents (2025-2026): Source: (Security Briefing, 2025)

Redback Fighting Vehicle Data Theft (Nov 2025): The "Cyber Toufan" group, believed to have Iranian backing, leaked 3D renderings and technical data related to the Australian Army's new $7 billion Redback infantry fighting vehicles. The data was accessed through breaches of Israeli defence companies involved in the project.
IKAD Engineering Breach (Nov 2025): The J Group ransomware gang claimed to have infiltrated IKAD Engineering, a defence contractor, for five months. They allegedly exfiltrated 800 GB of data, including information on naval contracts, the Hunter Class frigate, and Collins Class submarine programs.

Impact of the Incident

Supply Chain Vulnerabilities: While these breaches did not directly compromise core ADF systems, they exposed sensitive technical information, employee files, and project details.

Government Response

The Australian Government implemented several measures following the breach (Security Briefing, 2025):

Strengthening cybersecurity requirements for defence contractors involved in sensitive defence projects.
Expanding the role of the Australian Signals Directorate (ASD) in monitoring and protecting defence industry networks.
Enhancing cybersecurity guidelines under the Defence Industry Security Program (DISP) to improve supply-chain security.
Increasing collaboration between government agencies and defence companies to improve threat intelligence sharing and cyber resilience. This incident underscored the importance of strong cybersecurity governance within defence supply chains and reinforced the need for comprehensive national cybersecurity strategies to protect critical military technologies and national security interests.

International Collaboration in Cybersecurity

Australia collaborates with several international partners to strengthen cybersecurity.

Key Strategic Alliances & Partnerships: (Home Affairs, Gov, AU, 2023-2030)

Five Eyes (FVEY) Alliance: Deepening collaboration with the US, UK, Canada, and New Zealand to share threat intelligence and enhance joint defense against state and non-state actors.
AUKUS: Beyond submarines, AUKUS drives collaboration on advanced, critical technologies to boost sovereign capabilities and interoperability.
United States: Deepening security partnerships, including commitments to the Counter Ransomware Initiative (CRI) to break the cybercriminal business model.
India & Quad: Collaborating through the Quad partnership to enhance regional cyber security capacity, secure critical infrastructure, and promote secure technology ecosystems.

Most Meaningful Collaboration

The Five Eyes alliance (Australia, United States, United Kingdom, Canada, and New Zealand) (Home Affairs, Gov, AU, 2023-2030) is the most significant collaboration for Australia. This intelligence-sharing partnership provides access to advanced cyber threat intelligence and strengthens collective defence against cyber threats.

Can the Cybersecurity Strategy Safeguard Space and Nuclear Security?

The short answer is No! Let’s understand this in detail.

1. No Direct Nuclear Security Framework

Australia does not yet have a dedicated framework for cyber strategy for nuclear systems.

We cannot assume that nuclear security is covered through AUKUS and defence technologies, as:

Australia's nuclear submarine program is still in development (ASA, 2026)
Cyber protection frameworks for nuclear command, control, and communications (NC3) are not clearly addressed in the strategy

Nuclear cybersecurity requires highly specialised protection frameworks similar to those used in the United States and NATO (Chatham House, 2020).

Figure 7 - Australia's Nuclear Facility: Source-https://www.ansto.gov.au/education/nuclear-facts/what-is-synchrotron-light

2. Limited Space Cybersecurity Architecture

Australia’s strategy mentions space systems as critical infrastructure (Home Affairs, Gov, AU, 2023-2030), but it does not yet provide a detailed cybersecurity architecture specialised for all space assets.

Major vulnerabilities include:

satellite communication networks
ground control stations
satellite supply chains
GPS and navigation infrastructure

Countries like the United States and France have dedicated space cyber defence strategies (USA France Gov, 2017-2021), while Australia currently relies on broader critical infrastructure protections.

Figure 8 - CSIRO Australia's Space Facility - Source: https://www.csiro.au/en/about/locations/state-locations/ACT/Tidbinbilla

3. Over-Reliance on Alliances: Strategic Dependence

Australia’s space and nuclear cyber security heavily relies on international partnerships, especially:

AUKUS
Five Eyes intelligence alliance
United States defence cooperation

Australia’s cyber protection of space and nuclear capabilities is strongly dependent on allied technological and intelligence support.

4. Lack of Offensive Deterrence in Space Domain

Cyber deterrence in the space domain requires:

offensive cyber capability
anti-satellite cyber protection
satellite network redundancy

Australia’s strategy focuses more on resilience and cooperation rather than deterrence in space systems. This is a key strategic limitation.

Reasons for Success or Failure and Policy Recommendations

Factors Supporting Success

Several factors increase the likelihood of success for Australia’s cybersecurity strategy:

Strong institutional framework and leadership.
Collaboration between government and industry.
International partnerships for intelligence sharing.
Continuous investment in cyber workforce development.

Potential Challenges

Despite its strengths, the strategy may face challenges such as:

Rapid technological changes.
Shortage of skilled cybersecurity professionals.
Increasing sophistication of cybercriminal networks.
Missing Nuclear & Space security provisions.

Policy Recommendations

If given the opportunity to improve the strategy, the following policy measures could be implemented:

Develop specialised cybersecurity frameworks for nuclear and space systems, particularly for satellite networks, defence technologies, and future nuclear-powered submarine capabilities.
Expand national cyber workforce development programs to address critical skills shortages in advanced cyber defence and intelligence capabilities.
Strengthen mandatory cybersecurity regulations for critical infrastructure and defence supply chains, building on the Security of Critical Infrastructure Act.
Increase investment in sovereign cyber technologies, including advanced threat detection, quantum-resistant cryptography, and secure system design.
Strengthen Australia’s sovereign cyber capability while maintaining strategic alliances, ensuring greater operational independence within partnerships such as Five Eyes and AUKUS.

Conclusion

Australia’s 2023–2030 Cyber Security Strategy reflects a strategic shift from viewing cyber threats as purely technical risks to recognising them as core issues of national power, economic security, and geopolitical competition. Rather than relying solely on defensive measures, the strategy attempts to build a resilient cyber ecosystem that integrates intelligence capabilities, industry participation, and international partnerships.

Australia has begun developing domain-specific cybersecurity guidance—particularly for Low Earth Orbit satellite communications—but it does not yet appear to have publicly available, comprehensive national cybersecurity frameworks governing the full lifecycle of its nuclear and space systems. Nuclear assets remain protected through a combination of nuclear-safety, physical-security, safeguards and general government cybersecurity requirements, while space protections remain distributed across civil, defence and critical-infrastructure arrangements.

However, the real measure of success will not lie in the framework itself but in how effectively Australia translates strategic intent into operational capability. As emerging domains such as space systems, advanced defence technologies, and nuclear-powered submarine programs become increasingly digitised, cybersecurity will play a decisive role in safeguarding Australia’s sovereignty and technological advantage. Strengthening sovereign cyber capabilities while maintaining strong alliances will therefore be essential for ensuring that Australia remains secure and competitive in an increasingly contested digital environment.