Share this article on:
Western Australia has announced a new consultation which will review the cyber security standards of the state’s energy sector.
The consultation, which was called in by Energy Policy WA, will take place over six months and review internal information technology (IT) systems, critical infrastructure and more.
“Cyber security is a growing threat to all critical infrastructure, including the energy sector,” a spokesperson for Energy Policy WA told iTnews.
“Energy Policy WA expects this consultation will identify priority areas for focus in cyber security for the energy sector in Western Australia.”
The consultation aims to bolster the sector against future cyber security incidents in light of increased cyber attacks against critical infrastructure.
The consultation will analyse operations of electricity, gas and liquid, and will investigate the critical risks and likely threat vectors of infrastructure, internal operations and more.
“Any disparity between internal cyber security practices and external ones (for example, internal standards for connected equipment versus requirements for externally provided equipment that connects to an energy system) should also be considered,” reads a tender statement of requirements.
The consultation will also review the cyber practices on customer data, corporate systems and retail systems.
Australia has recently bolstered its critical infrastructure cyber security with the passing of the nation’s first standalone Cyber Security Act.
The act, launched as part of the 2023–2030 Australian Cyber Security Strategy, aims to address gaps in Australia’s cyber resilience and move towards the government’s goal of making Australia the most cyber-secure country in the world.
“The Australian government is delivering on its commitment to secure Australia’s cyber environment and protect our critical infrastructure,” Minister for Cyber Security Tony Burke said.
“The government has passed into law Australia’s first standalone Cyber Security Act, a key pillar in our mission to protect Australians from cyber threats.
“This package forms a cohesive legislative toolbox for Australia to move forward with clarity and confidence in the face of an ever-changing cyber landscape.”
The Security of Critical Infrastructure Act 2018 (SOCI) will also be reformed, simplifying the sharing of information between government and industry, including the regulation of telecommunications companies into the act, expanding the government’s last resort powers to allow it to better deploy aid in the event of a critical infrastructure cyber attack and allowing the government to direct entities to deal with major flaws in their risk management programs.