2026 - Inaugural Cyber Action Year

2026 marks the inaugural Cyber Action Year, an extension of Cybersecurity Month in October each year. This initiative, led by the Australian Signals Directorate (ASD), is far from being an obscure celebration for technology nerds. It’s a reminder to leaders in businesses and government that the many technologies we rely on every day can be used against us, and that being proactive protects our workplaces, staff and customers.

For several years, cyber criminals have increasingly attacked suppliers, breaking into computer systems, stealing sensitive information and demanding a ransom to prevent embarrassing public release, or sending fake invoices with altered payment details. More recently, ASIO’s Director-General has highlighted the risk of foreign governments using cyber methods to further their aims.

Councils and suppliers have relationships which are critical in protecting communities against cyber threats. As a tier of government, disruption of council services or leaking of personal information can impact residents, local economies, and the environment. They are attractive targets. Suppliers of all kinds, including those outside the technology sector, use computer systems to manage communications, finance, manufacturing, logistics, and more. A breach of a council supplier doesn’t just impact the victim; it impacts the council and everyone who depends on them. That impact can be highly damaging as it flows to residents and degrades community trust.

What can you do? How can councils and suppliers work together for mutual benefit? It starts with good advice, strong relationships, and a shared willingness to learn and adapt.

Building trusted relationships between councils and suppliers is vital. For cybersecurity, this trust doesn’t just come from the execution of a contract. It comes from being more open, raising standards, acknowledging areas that need improving, and working together so that each gets benefit. This is especially true for smaller councils and suppliers where access to cybersecurity knowledge and resources is limited. Understanding each party’s objectives and limitations and partnering towards a common goal helps both.

Effective cybersecurity isn’t about what you do – it’s about how you do it and being transparent about it.

Australian Signals Directorate

ASD’s website has a wealth of helpful and practical information available to educate individuals, businesses and government about cybersecurity including actions you can take immediately to protect your people and stakeholders. Their advice is authoritative and free. ASD also has a free Cyber Security Partnership Program which provides additional information and services to members. Individuals and Australian businesses of all sizes are encouraged to engage with the program.

NSW Councils - Cyber Security Partnership

For NSW councils, an additional sector-wide partnership program has been created by councils for councils. Supported by LGP, the partnership encourages peers to help each other, share ideas and approaches, and look for sector-wide opportunities to solve cybersecurity issues. It is currently guided by cybersecurity leaders from Northern Beaches, Federation and Tweed Shire councils, with members already representing over 60% of NSW councils and 5.5 million NSW residents. Discussions to date have covered vulnerability management, security governance and frameworks, critical infrastructure protection and third-party security assessments.

Councils wishing to join the sector’s Cyber Security Partnership can contact [email protected], who will collect their details and pass them on to the relevant Partnership representatives.

Cyber-attacks in the news can seem scary but distant. Cybersecurity can seem complicated and costly. Neither are true. Cyber-attacks can happen to anyone in any industry, and protecting against them with the right support doesn’t have to break the company, council, or the bank.

Written by: David Griffiths, Chief Information Security Officer, Northern Beaches Council