Cybersecurity Policy Report, Australia Establishes ‘No-Fault’ Cyber Incident Review Board, (May 6, 2026)
A Cyber Incident Review Board that will conduct “no-fault, post-incident reviews of significant cyber security incidents” has been established by the Australian government.
“These reviews will deliver actionable recommendations to government and industry to help prevent, detect, respond to, and minimise the impact of similar incidents in the future,” Australia’s Department of Home Affairs said in a news release.
“The Board, established under the Cyber Security Act 2024, is a key component of the Australian Government’s 2023-2030 Australian Cyber Security Strategy. It supports the Government’s vision of making Australia one of the world’s most cyber secure nations by 2030, with resilient, cyber ready communities, strong businesses and a secure national economy,” the department added.
The seven-member board will be chaired by Narelle Devine, global chief information security officer for Telstra Group Ltd.
“We know that cyber attacks are constant. This guarantees we learn from every attack and keep increasing our resilience,” said Tony Burke, Australia’s cybersecurity minister. “The Cyber Incident Review Board will examine major cyber security events, develop findings, and provide recommendations to improve national cyber resilience across government and industry.”
In the U.S., a similar board, the Cyber Safety Review Board, was established by executive order during the Biden administration but was disbanded in January 2025 by the Trump administration (CPR, Jan. 22, 2025).
News: InternationalLegislation DataSecurity