Parliamentary Network Fails Cybersecurity Audit, Leaving It Vulnerable

• •DPS failed to implement seven of eight essential cybersecurity controls.
• •High staff turnover in cybersecurity roles has created significant vulnerabilities.
• •Previous incidents highlight ongoing risks of foreign cyberattacks on government systems.

An audit by the Australian National Audit Office revealed that the Department of Parliamentary Services (DPS) failed to implement seven of eight essential cybersecurity measures, leaving the parliamentary network vulnerable to attacks. This network supports nearly 5,000 users across approximately 11,000 devices. The report highlighted issues such as inadequate multifactor authentication, poor software patching, and insufficient access controls. High staff turnover in cybersecurity roles has exacerbated these vulnerabilities, with over half of the cybersecurity staff having less than a year of experience. Previous incidents, including the mishandling of sensitive emails and a phishing attack on an independent MP's WhatsApp account, underscore the risks. The audit's findings raise alarms about the potential for foreign espionage and cyberattacks targeting Australian government systems.