A Clear Explanation of Australia’s Ransomware Action Plan | UpGuard

This report analyzes Australia’s Ransomware Action Plan and related international collaboration, detailing 11 key initiatives such as mandatory ransomware reporting for larger businesses, stronger criminal offenses, crypto payment seizure capabilities, a multi-agency AFP-led task force (Operation Orcus), and significant budget allocations to counter ransomware. It argues the plan targets three pillars—disrupting ransom payments, hardening critical infrastructure, and curbing ransomware distribution (including RaaS)—while noting gaps like the absence of explicit Zero Trust and least privilege policies. The report provides actionable guidance for businesses: leverage ACSC resources, ensure timely NDB/OAIC reporting, implement the Essential Eight, adopt Zero Trust, and deploy attack surface monitoring and data leak prevention to improve ransomware resilience.