Australian 2025 Commonwealth Cyber Security Resilience

This document summarizes the 2024–25 PSPF Assessment and the 2025 Commonwealth Cyber Security Posture reports, highlighting generally strong governance and information security but measurable gaps in technology/cyber controls: 79% effective compliance in technology security, only 22% of entities reached Essential Eight Maturity Level 2 across all controls, legacy IT and underreporting of incidents are key obstacles, and recommended actions include completing Essential Eight adoption, improving detection/logging and incident reporting, modernizing legacy systems, strengthening supply-chain risk management, and preparing for post-quantum cryptography.