October is Cyber Security Awareness Month, and this year’s Australian Government theme is “Building our cyber safe culture”. While the basics like software updates, unique passphrases, and multi-factor authentication are crucial for everyone , the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) is providing guidance for businesses to go a step further.
Here is a look at the four technical themes ASD’s ACSC will be covering this month to help businesses build a robust cyber security posture:
Week 1: Event Logging
You can’t defend what you can’t see. Event logging is a vital part of your cyber security strategy as it helps you detect threats that might have gone unseen. Malicious actors thrive when organisations lack effective logging, as it gives them an “invisibility cloak” to move within networks
Week 2: Legacy Technology
Outdated hardware and software that are no longer supported by vendors, known as legacy technology, can provide an open door for malicious actors to access your systems. While replacing old tech might seem expensive, it’s far less costly than a major cyber attack. If immediate replacement isn’t possible, consider temporary measures like network segmentation and advanced logging to reduce risks.
Week 3: Supply Chain and Third-Party Risk
The cyber risks of your suppliers are also your risks. A supply chain weakness can lead to data breaches, system outages, and the theft of sensitive commercial data. Your organisation’s cyber security strategy must include supply chain risk management, which involves understanding the risks and setting clear security expectations for your providers.
Week 4: Quantum Readiness
The future of cyber security is here. A powerful quantum computer could render common public-key encryption protocols insecure, putting your communications and data at risk. ASD’s ACSC encourages organisations to be prepared by 2030 by transitioning to more secure forms of encryption and educating relevant staff.
By taking action on these key areas, your business can better protect its networks and digital infrastructure. To learn more and access resources, visit cyber.gov.au/CAM2025.
References & Further Resources:
For more detailed guidance on implementing event logging and other protective measures, visit the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) official campaign page
-
To understand the global standards and timeline for post-quantum cryptography, refer to the National Institute of Standards and Technology (NIST) official roadmap
Read Next Article: 5 Uncomfortable truths about AI that will redefine your Business
