Neither AUSTRAC or Services Australia is well placed to ensure business continuity or disaster recovery in the event of a significant or reportable cyber security incident, according to a new report by the Australian National Audit Office (ANAO).

Australia’s largest private health insurer was aware of “serious deficiencies in its cybersecurity and information security framework” a full two years before the October 2022 data breach that saw a record loss of personal customer information to hackers, the Australian Information Commissioner (OAIC) has alleged in a document filed to the Federal Court