Australian signals chief Mike Burgess warned Australia’s business community and their boards about mounting private offensive hacking attacks in the name of corporate or cyber security and how this would not be tolerated by the signal’s agency.
Burgess said to a room full of security and policy officials in Canberra, “Worryingly I’ve heard of board rooms in Australia contemplating the prospect of hacking back to defend themselves against potential attacks. That should not be part of any organization’s cyber security strategy, that would be an illegal act here in Australia. An obligation to protecting corporate assets does not extend to breaking the law. No board or company should spend a dollar on getting advice on hacking back.”
A major concern for ASD is that possible cyberattacks launched by Australian companies risk an escalation in malicious activity. A widespread belief about complicating matters in the financial services industry that geopolitics is the main primary driver of malicious state and it sanctioned cyber activity towards institutions of the west mainly fraud as a way of payback for state sanctions being applied.