First published: 13 Oct 2025
Last updated: 13 Oct 2025

Content written for

Large organisations & infrastructure
Government

Australian CI is, and will continue to be, an attractive target for state-sponsored cyber actors. State-sponsored actors routinely target Australia’s CI networks, possibly to conduct espionage or to pre-position.

The risk is already being realised, mitigating it must be a priority now.

Today, we have released the CI Fortify publication that provides high-level cyber security recommendations for Australian CI operators to strengthen their security posture and resilience in preparation for instances of crisis or service disruption. This guidance outlines two actions that CI operators are encouraged to achieve. These are the ability to:

  1. Isolate vital operational technology (OT) and enabling systems from the internet, other networks and systems for 3 months while maintaining critical services.
  2. Rapidly rebuild vital OT and enabling systems completely to minimise disruptions to critical services.

Putting these measures in place not only helps reduce the cost of disruption, but also builds long-term stability and supports proactive resilience for OT systems.

Cyber threats to CI are a national concern. Read the full publication and take proactive steps today to help fortify Australia’s CI against these evolving threats.

Was this helpful?
Yes this was helpful
No this was not helpful

Thanks for your feedback!

We welcome additional feedback below.

Was this information easy to understand?
Will you take action after reading this?
Did you find the information you were looking for?
Did the design and layout of this page meet your expectations?