From the CEO: Securing our digital future

As a society, we’re navigating a rapidly evolving digital landscape. As we do, it's clear that the internet is more valuable than ever, yet the very foundations of that value are being challenged.

October is Cyber Security Awareness Month so it’s timely for policymakers and industry leaders to consider the role of cyber security, which is a core issue that limits the ability of internet users to fully participate in economic growth and social wellbeing. auDA has consistently advocated for improved cyber security policy, including through its Public Policy Agendas. More remains to be done, by all stakeholders. We must move beyond reacting to threats and data breaches, and instead focus on how together we can build a proactive culture of cyber security.

One notable finding from our research is the disconnect between concern and preparedness. A vast majority of Australians believe cybercriminals are becoming more sophisticated (83 per cent) and are so concerned they actively avoid certain online activities (67 per cent). However, in parallel, many business and government services are now only available online. In the long-term, avoiding key online activities will limit our ability to benefit from digital technologies.

Despite this, our data shows the majority of Australian small businesses are greatly underprepared. Only one in five (20 per cent) small businesses have a formal cyber security policy or offer staff training, a decrease from 2021, and less than a quarter (21 per cent) do not spend any money on cyber security.

Small businesses are the backbone of Australia’s economy and this preparedness gap is a vulnerability we cannot afford to ignore. In addition, many small businesses aren’t aware that cybercriminals use automated scanning technologies to locate and exploit online vulnerabilities in businesses of all sizes. We need to foster an environment where businesses, regardless of size, are equipped with the skills and resources to protect themselves, their staff and their customers.

This requires collaborative efforts from government, industry and academia to develop and promote accessible, easy-to-implement cyber security practices. There’s a need for a nationwide education campaign promoting digital security to ensure the basics are understood and practised by everyone, much like the effective slip-slop-slap campaign to tackle skin cancer.

But it is not up to individuals and small businesses alone. To shift the burden of cyber security, industry must embed Secure by Design principles into software and online applications from the beginning, much like safety features are now built into cars (e.g. traction control and emergency braking). This involves building security features into the design and architecture of a product and enabling them by default, rather than adding them as an afterthought. When developers prioritise security, they create a more secure online ecosystem, reducing the need for individuals and small businesses to take sole responsibility for protecting their data.

The Digital Lives of Australians research highlights that cyber security isn't just about technology, it's also about people. The skills gap is a barrier to confidence. While most Australians (69 per cent) consider cyber security to be an important digital skill for the future, only a small minority feel they have high capability (17 per cent of working men and 10 per cent of working women). Our research also reveals a gender gap, with 72 per cent of women believing they lack the technical skills for a career in IT, compared to just 54 per cent of men. Yet, a majority of Australians (57 per cent of women and 48 per cent of men) recognise that diversity brings value to the IT industry through improved innovation and problem-solving.

To improve the digital lives of all Australians, we must invest in building digital literacy from the ground up. This means working collaboratively across industry government and academia to create trustworthy resources, empower communities with tailored training and encourage a pipeline of talent, including underrepresented groups, to develop a nation of cyber-smart citizens.

The cyber threat landscape is complex, and no single organisation or entity can tackle this challenge alone. It is a shared responsibility, and it requires a multi-stakeholder approach, which is a core principle of auDA’s work.

auDA’s Digital Lives report finds most now use AI (56 per cent) but would feel more comfortable if there were stronger regulatory safeguards for AI (64 per cent). To support Australians, we need a framework that protects them from harm without stifling innovation. This could be done by enhancing existing laws such as privacy, intellectual property, and competition and consumer law, rather than creating new technology specific laws. A collaborative model developed in consultation with all interested stakeholders will lead to more robust, effective policies to keep Australians secure online.

Five years into the auDA Digital Lives of Australians study, cyber security remains the top concern among Australian consumers and small businesses - a pain point where we must focus our effort.

For industry, this is a sign that cyber security must be embedded as a business priority where security is treated as a point of differentiation amongst products, much like safety features are featured in the marketing of luxury cars. For policymakers, it is a reminder that effective cyber policy must be inclusive and collaborative. By working together, we can bridge the preparedness gap to increase confidence and help all Australians harness the full potential of the internet securely.