The Australian Information Industry Association has called on the federal government to use its leverage as a major technology buyer to secure volume discounts on cybersecurity services and provide them to small and medium businesses at low or no cost.
The proposal was included in AIIA’s submission to the consultation on developing Horizon 2 of the 2023–2030 Australian Cyber Security Strategy, with the submission urging government to “explore mechanisms to bulk purchase cybersecurity services and make them available to SMEs either free or at subsidised rates”.
“This would ensure consistent protection across the economy, addressing vulnerabilities in smaller organisations that are often the targets of cyberattacks,” the AIIA suggests.
AIIA said SMEs make up the backbone of the economy but continue to face barriers in accessing affordable cyber protection. “Without support, these organisations will remain disproportionately exposed to malicious activity, undermining national resilience,” it said.
The industry group also recommended that government use procurement more broadly as a lever to lift domestic capability, urging major ICT contracts to be structured to preference local delivery, workforce development and sovereign supply chains.
“Procurement should drive sovereign capability outcomes, keeping economic value onshore and building local skills alongside delivery,” the submission said.
Beyond procurement, AIIA said Horizon 2 must focus on scaling and integrating the six “cyber shields” outlined in the national strategy. It argued that the shields should evolve into a unified, layered defence system capable of withstanding both routine cybercrime and geo-strategic campaigns by sophisticated adversaries.
“Each shield must be more than a standalone initiative. Together they need to form a coherent, future-ready national framework of resilience,” it said.
The submission also pointed to the importance of planning for elevated threat environments linked to international tensions, noting the potential for “concerted campaigns by capable adversaries during periods of crisis.”
The Horizon 2 consultation closes later this month, with submissions from industry and professional bodies shaping the next phase of the cyber security strategy.
Do you know more? Contact James Riley via Email.