Delivering a Cyber Safe Victoria
Cyber security is a critical enabler of trusted digital government, resilient public services and economic growth. The cyber environment continues to evolve at pace, requiring practical, coordinated and capability-focused action across government, industry and the community.
In 2024–25, the Australian Signals Directorate’s (ASD) Australian Cyber Security Centre (ACSC) received more than 84,700 cybercrime reports, which equates to one report every six minutes. Victoria accounted for 26 per cent of reports nationally. ASD’s ACSC also responded to more than 1,200 cyber security incidents, an 11 per cent increase on the previous year.
Emerging technologies are rapidly reshaping the cyber threat landscape. Artificial intelligence is enabling cyber criminals to undertake more sophisticated and scalable attacks, while quantum computing presents a longer-term challenge by threatening the cryptography that underpins today's digital systems. These developments reinforce the need to strengthen cyber resilience now while preparing for the transition to post-quantum cryptography.
Responding to this environment, the Australian Government’s Horizon 2 Action Plan prioritises stronger protection of government systems and critical infrastructure, improved supply chain resilience and closer coordination with states and territories through a National Cyber Security Compact. Victorian Government efforts will support this national effort.
Since 2021, the Victorian Government has invested more than $130 million in Victoria’s cyber capabilities to improve digital defences and enhance the state’s digital resilience. This includes $37.5 million over three years in the 2025-26 State Budget to continue Victoria’s program of cyber security activities for Victorian Public Sector organisations.
Victoria's Cyber Strategy sets the government's vision for creating a cyber safe Victoria. During 2025-26, the Mission Delivery Plan advanced this vision through initiatives aligned to the strategy's three core missions:
- improving the safe and reliable delivery of government services
- creating a cyber safe place to work, live and learn
- supporting a vibrant cyber economy.
Reducing the risk of adverse cyber security events on government systems and services
The Department of Government Services (DGS) continued to reduce the risk of adverse cyber security events by strengthening incident response, emergency management, supply chain security, workforce awareness and cyber maturity across the Victorian Public Sector (VPS). Across 2025-26 this included:
- putting in place two new cyber response partner contracts so Victoria can access the capacity and specialist capability required to respond to incidents at scale
- working with the Commonwealth to operationalise new national cyber security information-sharing obligations, securing Victorian consent and supporting government entities with guidance and training
- commencing delivery of the Class 2 Cyber State Controller Program that strengthens state-tier leadership in cyber emergencies
- delivery of a Cyber Consequence Management Framework that minimises the risks and harms to government and communities by delivering effectively coordinated cyber security incident responses
- continuing to trial and gather feedback on the pilot VPS AI Assurance Framework to inform implementation in 2026-27.
DGS also delivered the Supply Chain Cyber Risk Management Framework. Supported by new Supply Chain Incident Management Guidance and an Incident Response Playbook, the framework defines a common approach to help organisations mature their supply chain risk management processes.
An updated cyber security awareness program was made available to all VPS organisations, mitigating human-related cyber risk across the sector. The program provided VPS organisations access to a varied suite of learning assets on priority behaviours and themes, adaptable to their individual operating contexts.
In partnership with the Victorian Managed Insurance Authority, DGS delivered the Victorian Government Cyber Maturity Benchmark, providing critical visibility of government’s maturity and opportunities to address common weaknesses. Improvements to the benchmark in 2025-26 further strengthened the government's understanding of cyber resilience across the VPS.
Boosting cyber security skills, talent and career pathways
DGS continued to build a pathway for graduates of the Certificate IV in Cyber Security into cyber security roles. This year, five graduates were employed through the Victorian Government’s Cyber Internship Program, gaining hands-on experience alongside cyber security professionals. This year’s program expanded to other departments across the VPS, further establishing entry level pathways.
DGS also worked closely with the Department of Jobs Skills Industry and Regions (DJSIR) to help champion cyber security workforce diversity.
The Global Cyber Talent Migration Support Program reached more than 132,000 cyber professionals around the world and attracted more than 1,450 people to the TalentConnect platform. The program connected candidates with Victorian employers based on workforce needs and candidate experience.
The Women in Security program supported almost 90 women to transition into cyber security roles and leadership pathways through specialised training and certification, mentoring, career support and networking.
The Summer of Cyber program supported more than 90 women and gender-diverse students and recent graduates to build job-ready skills, while helping more than 45 Victorian small and medium enterprises and start-ups strengthen their cyber capability.
Supporting the continued growth of Victoria's cyber industry
The Victorian Government continued to support the growth of Victoria's cyber industry by helping local businesses build international connections and pursue new markets.
Global Victoria and the Victorian Government's Trade and Investment offices maintained engagement with strategic partners in key overseas markets and supported Victorian cyber businesses to identify new opportunities.
In October 2025, the Victorian Government sponsored the Australian Cyber Conference (CyberCon) for the fourth consecutive year. As the largest cyber security conference in the southern hemisphere, CyberCon attracted more than 5,300 attendees and delivered an estimated economic contribution of $17.4 million.
Building improved cyber security resilience for the community and across industries
DGS continued to strengthen community and industry preparedness for significant cyber security incidents and emergencies.
The Information Security Advisory Group (ISAG) and Cyber Culture Working Group (CCWG) continued to connect cyber security and culture practitioners across government and councils, with membership for both increasing 17 and 30 per cent in 2025-26 respectively. These communities provide timely access to cyber security updates and provide dedicated channels for collaboration, strengthening collective readiness across the public sector.
The Victorian Cyber Security Incident Management Plan (CSIMP) has been reviewed to ensure that emergency preparedness procedures are as effective and robust as possible.
DGS continued to support Victoria’s most vulnerable groups to engage safely online. Partnering with local councils and Victoria Police, DGS delivered a series of information sessions for older Victorians on cyber safety basics and how to recognise scams.
I am pleased to share this report on the progress made to deliver the Victorian Cyber Strategy 2025-26 Mission Delivery Plan.
The 2026-27 Mission Delivery Plan sets out our continuing and new priorities for the year ahead, building on these achievements to support secure digital transformation, capability uplift and practical delivery across government, industry and the community.
Dan Barron
Victorian Government Chief Information Security Officer
Download a copy of this report:
Updated