Quick Read

• Services Australia is set to roll out new security protocols for myGov by June of next year.
• Multi-factor authentication (MFA) to be introduced for transactions deemed high-risk.
• A new security dashboard will assist users in managing and improving their account security.
• Creation of an Enterprise Customer Authentication Tool (ECAT) to scrutinize high-risk transactions.
• Establishment of a myGov Incident Response System (MIRS) to enhance information-sharing practices.
• Emphasis on boosting security for Centrelink, Medicare, and Child Support services.

Fortifying Security Measures for myGov

Services Australia has disclosed a thorough security enhancement for myGov, slated for implementation by June of the coming year. This initiative addresses vulnerabilities utilized through the platform’s single sign-on system and the unrestricted creation of accounts.

Guaranteeing Uniform Verification Processes

The agency is dedicated to guaranteeing uniform verification processes across its services, including Centrelink, Medicare, and Child Support. Nevertheless, other departments relying on myGov for digital service delivery are urged to embrace similar protocols to ensure uniformity.

Cybersecurity Issues Raised by Ombudsman

An investigation by the Commonwealth Ombudsman disclosed that cybercriminals encountered few obstacles while using stolen credentials to infiltrate myGov accounts. Once they gained access, they could easily modify personal information and connect to other digital government services without notifying the user.

Launch of Multi-Factor Authentication

The Ombudsman suggested the adoption of multi-factor authentication (MFA) for transactions classified as high-risk. This measure would significantly lower risks by notifying users of potential breaches in real-time and preventing unauthorized transactions.

Discrepancies in Customer Service Channels

Investigations also uncovered discrepancies in the way customer service channels managed account modifications. For example, Centrelink’s contact center agents required users to verify existing bank details for updates, a procedure not replicated in online updates. This inconsistency provided openings for fraudsters to exploit different channels.

Legal and Legislative Hurdles

Services Australia has observed that legislative limitations hinder them from flagging breaches across various services within myGov. Legal counsel is being sought to clarify the extent of these restrictions and to explore potential remedies.

Variety of Security Measures Currently Underway

Services Australia is dedicated to advancing a series of security enhancements, which entail:

• Establishing baseline standards and checks for all services accessed via myGov.
• Bolstering security concerning bank account updates and concealing bank account details online.
• Launching a myGov security dashboard to encourage users to strengthen their security settings.
• Developing an Enterprise Customer Authentication Tool (ECAT) to facilitate secure telephone and in-person service delivery.
• Implementing a myGov Incident Response System (MIRS) for refined information sharing among services.

Security Dashboard and Passkeys

By June of next year, users will gain access to a myGov security dashboard that will visually display their security settings and prompt actions such as upgrading to passkeys or Digital ID. Passkeys for myGov were rolled out in late June and are being promoted as a more secure option compared to traditional username-password methods.

Enterprise Customer Authentication Tool (ECAT)

The ECAT will be designed to assist telephone and in-person service delivery channels. It will scrutinize high-risk transactions, thereby diminishing the possibility of fraudulent changes to phone numbers, email addresses, and other user details.

myGov Incident Response System (MIRS)

Services Australia is also in the process of creating the myGov Incident Response System (MIRS) to enable quicker, more precise, and auditable information sharing between the myGov platform and associated services. This initiative will be financed by the latest federal budget and is anticipated to be delivered in two phases by June 2025.

All rights protected. This content may not be published, aired, rewritten, or redistributed in any manner without prior approval.

Your use of this site signifies your acceptance of nextmedia’s Privacy Policy and Terms & Conditions.

Brief Overview

• Important insights and trends from the Skybox and BT Security roundtable event.
• Emphasis on cybersecurity strategies for addressing emerging threats.
• Expert evaluations of the current cybersecurity landscape in Australia.
• Significance of proactive threat management and risk evaluation.

Notable Insights from the Skybox and BT Security Roundtable

The recent roundtable event organized by Skybox and BT Security convened some of the leading experts in the cybersecurity field. This gathering was crucial, providing a stage for specialists to explore the latest trends, issues, and strategies in cybersecurity.

Cybersecurity Trends and Issues

A key takeaway from the event was the focus on the changing landscape of cyber threats. With the increase in sophisticated cyber-attacks, companies must remain ahead by implementing advanced security solutions. Experts underscored the escalating role of artificial intelligence and machine learning in identifying and neutralizing these threats.

Proactive Threat Management

Proactive threat management was a primary focus during the discussions. The specialists emphasized the necessity for organizations to transition from a reactive to a proactive approach regarding cyber risks. This entails ongoing surveillance, vulnerability evaluations, and regular updates of security measures.

Expert Insights on Cybersecurity in Australia

The roundtable also offered perspectives on the state of cybersecurity in Australia. Experts noted that while Australia has made considerable progress in strengthening its cybersecurity framework, there remains significant work ahead. The necessity for enhanced collaboration between public and private sectors was a recurring theme in the discussions.

Conclusion

The Skybox and BT Security roundtable event was a crucial assembly that illuminated the current and forthcoming state of cybersecurity. Stressing the need for sophisticated security measures and proactive risk management, the event showcased the vital role of technology and collaboration in tackling cyber threats. As cyber risks continue to evolve, such exchanges are crucial for keeping enterprises and individuals informed and equipped.

Q&A

Q: What were the primary subjects discussed at the Skybox and BT Security roundtable?

A: Key subjects included prevailing cybersecurity trends, the significance of proactive threat management, and expert views on the cybersecurity situation in Australia.

Q: Why is proactive threat management crucial?

A: Proactive threat management aids businesses in foreseeing and alleviating cyber risks before they can inflict substantial harm, ensuring a stronger security posture.

Q: In what ways are artificial intelligence and machine learning applied in cybersecurity?

A: AI and machine learning are utilized to efficiently detect and respond to threats by analyzing vast amounts of data and identifying patterns that may signal a cyber attack.

Q: What are the current obstacles in cybersecurity in Australia?

A: Although Australia has advanced in cybersecurity, challenges persist, such as the demand for greater collaboration across sectors and the ongoing enhancement of security measures to adapt to evolving threats.

Quick Read

• Starlink’s user base in Australia has surpassed 200,000 services.
• ACCC seeks to add Starlink to the internet activity record keeping rule (RKR).
• ACCC’s RKR was established in 2018 when the ABS halted its broadband statistics collection.
• Starlink’s expansion is fueled by migrations from traditional services and efforts by Telstra to resell its offerings.
• Public feedback on the proposal is accepted until the month’s end.
• ACCC intends to release a revised RKR by September.

Starlink’s Climbing Popularity in Australia

The Australian Competition and Consumer Commission (ACCC) is closely monitoring SpaceX’s Starlink as its customer count in Australia grows rapidly. Having exceeded 200,000 services by March of this year, Starlink has established itself as a key player in the satellite internet marketplace.

ACCC’s Internet Activity Record Keeping Rule (RKR)

The ACCC plans to integrate Starlink within its internet activity record keeping rule (RKR) enacted in 2018. This rule was put in place when the Australian Bureau of Statistics (ABS) ceased the gathering of broadband subscriber and usage statistics. The RKR requires telecommunications firms to provide thorough data about their offerings to assist the ACCC in overseeing and regulating the market efficiently.

Shift from Traditional Services

The increase in Starlink’s customer base is largely due to users transitioning from older services like Telstra DSL, geostationary satellite services, and copper-based USO (universal services obligation) solutions. Especially in regional and remote areas, Starlink’s satellite internet has established itself as a credible choice, delivering faster and more dependable connectivity.

Telstra’s Collaboration with Starlink

Telstra, the leading telecommunications provider in Australia, has recently started reselling Starlink services, further enhancing its customer numbers. This partnership highlights the increasing acceptance of satellite internet as a mainstream alternative, even among established telecom providers.

Future Outlook and ACCC’s Involvement

The ACCC is poised for continued growth in Starlink’s customer base as more individuals shift from legacy systems to modern technologies. By adding Starlink as a reporting entity, the ACCC aims to gain a thorough overview of the retail and wholesale broadband landscape in Australia, thereby strengthening its regulatory capabilities.

Suggested Modifications and Public Input

In addition to monitoring Starlink’s expansion, the ACCC plans to observe the resale of low Earth orbit (LEO) satellite services. The commission is inviting public feedback on these proposals until the month’s conclusion, with intentions to implement an updated RKR by September.

Summary

As Starlink’s user base in Australia continues to rise, the ACCC is aiming to include the satellite internet provider under its rule for internet activity record keeping. This initiative seeks to clarify the broadband market landscape and enhance regulatory efforts. With Telstra reselling Starlink services and the public encouraged to express their opinions, the ACCC is preparing to unveil a revised RKR by September.

Q&A

Q: What motivates the ACCC’s interest in Starlink’s customer growth?

A:

The ACCC’s goal is to effectively monitor and regulate the broadband market. By bringing Starlink under its RKR, the ACCC can collect thorough data on internet services and usage, ensuring fair competition and protecting consumer interests.

Q: What is the Internet Activity Record Keeping Rule (RKR)?

A:

Established in 2018, the RKR requires telecom companies to submit detailed information about their broadband offerings. This rule was initiated to address the data gap created when the Australian Bureau of Statistics (ABS) discontinued its broadband statistics collection.

Q: In what ways has Starlink’s growth influenced the Australian broadband landscape?

A:

Starlink’s swift expansion, spurred by transitions from traditional services and its partnership with Telstra, has made it a pivotal entity in the satellite internet arena. This development has prompted the ACCC to pursue more comprehensive data to better understand market dynamics.

Q: What forthcoming actions will the ACCC take regarding the proposed changes?

A:

The ACCC has opened the stage for public comments on the proposed changes until the month’s end. After reviewing the feedback, the commission plans to release a revised RKR by September, which will encompass Starlink and other LEOsat-based services.