Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 23 OCTOBER 2026

Cyber Security: A Month In Retrospect (Australia) - September 2026

Herbert Smith Freehills Kramer LLP
Herbert Smith Freehills Kramer LLP
Contributor
Herbert Smith Freehills Kramer LLP

Herbert Smith Freehills Kramer LLP

We have one of the largest Southeast Asia international law practices, working across the region...

View firm profile
Explore more from Herbert Smith Freehills Kramer LLP

The HSF Kramer Cyber Risk Survey 2026 reveals a critical gap in Australian organisations' AI risk preparedness, with 97% aware of AI's impact on cyber threats but only 20% possessing detailed understanding. Third-party supply chain incidents affected 62% of respondents in the past year, while a reactive governance culture persists, with 59% believing only a major incident would drive meaningful change in data risk management.

AustraliaTechnology
Cameron Whittfield
Cameron Whittfield
Peter Jones
Peter Jones
Christine Wong
Christine Wong
Merryn Quayle
Merryn Quayle
Emily Coghlan
Emily Coghlan
Magdalena Blanch-de Wilt
Magdalena Blanch-de Wilt
Kaman Tsoi
Kaman Tsoi
Heather Kelly
Heather Kelly
Rebecca Gill
Rebecca Gill
+3 more
Author LinkedIn connections

September 2026 in Retrospect

News from HSF Kramer 

Cyber Risk Survey 2026

Now in its fourth year, the HSF Kramer Cyber Risk Survey draws on the views of general counsel and senior legal counsel across Australia's leading organisations to examine how legal leaders perceive, prepare for and respond to cyber risk.

The defining story of 2026 is AI. 97% of respondents are aware of how AI is changing the threat landscape, yet only 20% report a detailed understanding of those risks. Third-party risk remains the leading concern, with 62% experiencing a supply chain cyber incident in the past 12 months.

A reactive posture persists, with many organisations waiting for a catalyst before prioritising cyber governance. 59% of respondents believe it would take a cyber incident to meaningfully drive greater focus on data risk management. 

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

APRA v Bedingo And Adelaide Bank: A Wake-up Call For Directors And Officers

The Australian Prudential and Regulatory Authority has launched unprecedented civil penalty proceedings against Bendigo and Adelaide Bank following a 2023 cybersecurity breach that exposed critical weaknesses in the bank's risk management systems. This landmark case signals a fundamental shift in regulatory enforcement, extending accountability beyond corporate entities to individual directors and officers who fail to ensure adequate cybersecurity controls are functioning as intended.
AustraliaTechnology
Kennedys
Kennedys
Article

ASIC Demands Urgent Cyber Upgrades To Combat Frontier AI Security Threats

In an open letter published on 8 May 2026, ASIC, who are responsible for regulating Australia's corporate, financial services and insurance sectors, urged Australian financial services licence (AFSL) holders to act promptly against the risks posed by advanced AI systems. ASIC warned that malicious actors are increasingly using cutting-edge AI models to identify and exploit vulnerabilities at an unprecedented scale.
AustraliaTechnology
Kennedys
Kennedys