Avoid the gap: Making sense of Australia’s regulatory approach to cyber, AI and privacy

The cyber security industry is increasingly finding itself in the centre of the wider regulatory and compliance requirements that are being imposed across Australia to navigate digital risk and to protect data subjects and the wider community.

This trend has led to cyber security obligations being embedded in a broad range of emerging law and regulations and also being a major focus area for key regulators such as the Office of the Australian Information Commissioner, the Australian Securities and Investment Commission, and the Australian Prudential Regulatory Authority.

Over the coming 12 months these issues are likely to accelerate given the Australian’s government’s plans for a cross-economy Artificial Intelligence Act; a proposed second tranche of privacy reforms; increased focus on data governance legal obligations; and the enforcement-based approaches being adopted by regulators.

In this environment, cyber security controls, risk management frameworks, governance structures and maturity capabilities will become a key mechanism for organisations to demonstrate compliance with their legal obligations and to reduce the risk of regulatory non-compliance.

For information security professionals, this session will also them to understand regulator expectations and how these will influence the evolving needs of their senior management and the board.

Key issues that will be covered in this session include: