Queensland Government Entities Ignorant of Cybersecurity Vulnerabilities, Audit Reveals

Severity: Low (Score: 39.9)

Sources: Abc.Au

Summary

A report by the Queensland Audit Office has revealed that three government entities in Queensland were unaware of their vulnerabilities to third-party cybersecurity threats. The auditor-general identified contracts as a significant security gap, noting that only two out of 36 contracts reviewed mandated third parties to report cybersecurity incidents and vulnerabilities. The report highlighted the need for all public sector entities and local governments to review and update their IT systems, enhance the identification of suspicious activities, and strengthen contract management practices. This lack of awareness poses a risk to the integrity of government operations and data security. The report serves as a wake-up call for improved cybersecurity measures across the public sector in Queensland. Key Points: • Three Queensland government entities were unaware of their cybersecurity vulnerabilities. • Only two of 36 contracts required third parties to report cybersecurity incidents. • The audit office recommended comprehensive reviews of IT systems and contract management.

Key Entities

• Government (industry)