The safeguarding of our society against cyber threats requires a collaborative whole of society response.

A key focus area for this strategy includes increasing the cyber resilience of South Australian (SA) citizens, businesses, industries and critical infrastructure.

The protection of citizens requires a joint and collaborative effort between government, our communities and industry sectors to build a collective defence from cyber threats.

It is imperative that SA citizens, communities, and businesses are enabled to stay secure and resilient in a dynamic and sometimes hostile digital world. This requires a concerted effort to enhance collective cyber safety awareness, protect vulnerable groups, and foster community support networks.

Our strategy prioritises a preventative approach and provides resources for self-defence, aiming to reduce the widespread impacts of cyber breaches and cyber crime. This approach builds on existing national cyber strategy initiatives, supports not-for-profit organisations, and utilises government resources to form a coordinated network that enhances collective cyber resilience.

In addition to promoting self-defence, it is crucial that the government has access to the right information, tools, and resources to engage proactively with communities. Where necessary, the government must also have the appropriate powers to protect communities from cyber crime and cyber-enabled threats within the state.

To protect citizens and businesses, it is essential to ensure legislative and regulatory arrangements are fit for purpose. These must balance the societal need for security with the potential costs and effort associated with increased compliance obligations.

This strategy will improve the framework for the coordinated management of cyber hazards in SA to increase the state’s resilience against cyber threats, reduce supply chain risks across interconnected and interdependent industry sectors, and enhance the preparedness of organisations to manage potential disruptions.

Priority 1.1 SA citizens, communities and businesses are cyber safe, and cyber resilient.

• Support and develop public cyber campaigns and channels to enhance cyber safety and resilience across individuals, businesses, and communities, aligned with national and international initiatives.
• Evaluate potential services to help citizens and businesses identify and monitor cyber vulnerabilities or breaches.
• Promote cyber security awareness and education for professionals as part of ongoing professional education.
• Partner with industry, academia and across all levels of government on support programs for businesses and critical infrastructure.

Priority 1.2 SA communities are protected from cyber crime and cyber-enabled crime.

• Improve the capacity and capability to deter, disrupt and prosecute cyber crime and cyber-enabled crime.
• Enhance community involvement in cyber security awareness and associated initiatives to lower cyber crime victimisation rates and reduce impacts.

Priority 1.3 SA has fit for purpose cyber security legislative and regulatory arrangements.

• Develop and implement fit for purpose cyber legislation in line with the reviews of the Emergency Management Act 2004.
• Ensure SA has a proportionate regulatory and legislative environment to effectively address the cyber risks faced by the state.

Priority 1.4 SA’s cyber crisis hazard management is effective, efficient and coordinated.

• Strengthen coordination and collaboration between critical sectors to increase the state’s preparation and preparedness for cyber crises.
• Enhance government and industry preparedness for cyber crises through exercising and lessons management programs with critical sectors.
• Mature the cyber crisis hazard risk reduction efforts as part of the state’s broader framework for emergency management.

Priority 1.5 SA’s critical infrastructure can withstand and recover from cyber threats and disruptions.

• Promote collaborative efforts between government and industry in support of relevant federal critical infrastructure strategies and initiatives.
• Enhance collaboration and partnerships between SA critical infrastructure owners and operators on cyber resilience.
• Advance SA settings to strengthen critical infrastructure resilience, including via the support of the SA Critical Infrastructure Resilience Strategy.