From time to time the Australian Government receives information technology security information from foreign governments for distribution to owners and operators of critical national information infrastructure.
If you are an owner or operator of such infrastructure please e-mail cip@ag.gov.au to arrange for appropriate distribution of such information.
Information Security
Cyber crime poses an increasing threat to the national information infrastructure. The national information infrastructure is made up of those key communications and information technology systems that support critical industries and government services, such as the telecommunications, transport, distribution, energy, utilities, banking and finance industries and defence and emergency services.
The Australian Government, as part of its broader critical infrastructure protection strategy, has implemented a series of mechanisms including the Information Infrastructure Protection Group, AusCERT alerts and reporting scheme, the Australian High Tech Crime Centre, the IT Security Expert Advisory Group, and the Computer Network Vulnerability Assessment Program.
Information Infrastructure Protection Group
The Information Infrastructure Protection Group (IIPG) addresses issues relating to the exploitation and security of the national information infrastructure. The IIPG is an interdepartmental committee, chaired by the Attorney-General’s Department, that provides policy coordination and technical responses within the Australian Government on national information infrastructure related issues or events.
AusCERT Alerts and Reporting Scheme
The AusCERT National Alert Service is a free service funded by the Australian Government and operated by the Australian Computer Emergency Response Team (AusCERT). Businesses and private computer users can subscribe to the service to receive email bulletins on the latest information about computer network threats and vulnerabilities. This can help them protect their information technology systems in a time critical manner.
AusCERT also operates the National IT Incident Reporting Scheme. The scheme provides a confidential and secure mechanism for anyone to report computer security attacks or incidents affecting Australian-based networks or systems.
Information about AusCERT, to subscribe to the National Alerts Service or make a report
Australian High Tech Crime Centre
The Australian High Tech Crime Centre (AHTCC) is hosted by the Australian Federal Police in Canberra and staffed by representatives from all Australian State and Territory police forces. The AHTCC brings national consistency to the management of referrals, training, education, intelligence, policy advice and investigations relating to serious crime involving complex technology. Click here to go to the AHTCC web site.
GovCERT.au
The Australian Government announced the formation of GovCERT.au in 2005 to fulfil a need for policy formulation and provide a liaison point for foreign government Computer Emergency Response Teams (CERTs). GovCERT.au develops and coordinates Government policy for computer emergency preparation, preparedness, response, readiness and recovery. GovCERT acts as a point of contact within the Australian Government for foreign governments on CERT issues, and coordinates any foreign government requests.
As a CERT, GovCERT is responsible for preparing and coordinating Australia’s readiness for major NII incidents. GovCERT does not handle day to day computer incidents.
ITSEAG
Due to the increasing interconnectedness of business sectors in a modern economy, all critical infrastructure sectors are likely to confront some common, cyber-related issues. It is recognised that a broad information technology security perspective is required to inform the decision-making and planning of all bodies represented within the Trusted Information Sharing Network (TISN).
The IT Security Expert Advisory Group has been established to fulfil this role by providing information and guidance to the TISN on emerging or future IT security trends that have the potential to impact on all
industry sectors.
Information on the TISN and the expert group's work can be found on the TISN website at www.tisn.gov.au
IT Security Expert Advisory Group
The IT Security Expert Advisory Group was established as part of the Trusted Information Sharing Network for Critical Infrastructure (TISN). The group provides advice to the TISN sector groups on IT security vulnerabilities in critical infrastructure. Visit TISN for more information on the group’s work or email cip@ag.gov.au
Computer Network Vulnerability Assessment Program
The Computer Network Vulnerability Assessment Program (CNVA) is an Australian Government initiative developed to support the work of the TISN. The CNVA Program has two components: a private sector component and a public sector component. Visit TISN for more information on the CNVA program or email cipprojects@ag.gov.au