News

News tagged “Government and Policy”

Suburban Secure updates filed under this tag.

A stacked bar showing how 236 Queensland independent schools set DMARC — 13.6% at p=reject, 37.3% at p=quarantine, 30.1% at p=none, and 19.1% with no DMARC record. 120 schools (50.8%) are at an enforcing policy.

27 August 2026

Half of Queensland's independent schools do not enforce DMARC

We scanned the public email-authentication records of 236 Queensland independent and non-government schools. 81% publish a DMARC record, but only 51% enforce it and 19% have none at all — a gap that matters more since the 2026 Canvas incident put school contact lists in criminal hands.

Read update
A padlock resting on a laptop keyboard with light trails in the background, representing cyber security training and awareness.

10 August 2026

Queensland's $11.5 million micro-credentials program: free cyber security, AI and procurement training for small business

A new $11.5 million Queensland Government investment funds free AI, cyber security and procurement micro-credentials for small and family businesses through the University of the Sunshine Coast. A separate, already-available free cyber security course runs through TAFE Queensland. Neither replaces a proper security review, but both are a genuinely useful, no-cost starting point.

Read update
Illustration of a school board connected to a shield, with frontier AI threats and ASD guidance shown on either side.

6 August 2026

School boards and the cyber storm: what ASD's frontier AI guidance means for education governance

Australian school boards hold some of the most sensitive data in the community — HR, finance and pastoral care records — yet cyber is rarely a standing board agenda item. ASD's new frontier AI guidance for directors is a practical prompt to change that.

Read update
Illustration of an organisation connected through a vendor to a fourth-party supplier, with a warning icon showing where unmanaged risk travels through the chain.

29 July 2026

What a Queensland Audit Office report on third-party cyber risk means for the rest of us

The Queensland Audit Office's Managing third-party cyber security risks report found public sector entities gave testers admin-level access and left security out of most vendor contracts. Here's what smaller organisations can take from it.

Read update
Illustration of six shields in a row with a 2023 to 2030 timeline arrow, representing Australia's Cyber Security Strategy.

28 July 2026

Australia's Cyber Security Strategy 2023–2030: the six shields, in plain English

Australia's national cyber security strategy is built around six "cyber shields" and three delivery horizons running to 2030. Here's what each shield actually means, without the policy-document language.

Read update
Illustration of a government building, shield and Cyber Security Act 2024 badge.

28 July 2026

The Department of Home Affairs, the Cyber Security Act 2024, and what it actually means for a small organisation

Australia's first standalone cyber security law introduced mandatory ransomware payment reporting, a no-fault incident review board and new device security standards. Most small businesses and charities aren't directly captured — but the direction of travel matters.

Read update
Illustration of ReportCyber, Scamwatch, IDCARE and the OAIC connected to a central shield.

28 July 2026

Who do you actually call? Cyber incident and scam reporting in Australia, decoded

ReportCyber, Scamwatch, IDCARE, the OAIC, eSafety — Australia has several different reporting agencies depending on what's actually happened. Here's which one to use, in plain English.

Read update
Illustration of the Australian Signals Directorate and Australian Cyber Security Centre with a shield and cyber.gov.au resources.

28 July 2026

ASD and ACSC explained: who actually protects Australian businesses online

The Australian Signals Directorate and the Australian Cyber Security Centre are often mentioned in the same breath, but they're not quite the same thing. Here's what each one actually does, in plain English.

Read update
Illustration showing churches, charities and not-for-profits connected to a cyber security roadmap.

30 June 2026

NFPs named in Australia’s next cyber security action plan

Australia’s Horizon 2 cyber security plan includes specific action for charities and not-for-profits. That is a useful signal for boards, church leaders and community organisations.

Read update