2026–31 Cyber Security Regulatory Proposal

This document is a regulatory proposal concerning cyber security for the period 2026–31, focusing on the electricity distribution networks. It outlines the critical need for a robust cyber security strategy in light of increasing cyber threats and compliance obligations. The proposal discusses the evolving landscape of cyber security, emphasizing the integration of smart technologies and the growing risks associated with them. It identifies three options for enhancing cyber security resilience: maintaining existing capabilities, enhancing resilience capabilities, and achieving market-leading maturity. The recommended approach is to enhance cyber security resilience, which involves implementing practices that provide significant risk reductions. The document also highlights compliance obligations under the Australian Privacy Act and the Foreign Investment Review Board restrictions, emphasizing the importance of protecting customer data and ensuring operational reliability. The proposal aims to address legislative gaps and align with international best practices to mitigate cyber threats effectively.