The Federal Government has joined forces with Australia’s defence industry to develop a ‘go-to’ guide for small businesses on how to improve their security practices to help them win Defence work.

About 40% of businesses that apply to win Defence work have insufficient cyber security measures to meet Defence’s standards. The guide will help industry overcome those issues to become ‘Defence-ready’, in turn supporting the Government’s $270bn investment in Defence capability over the next decade.

Minister for Defence Industry Melissa Price launched the Working Securely with Defence guide alongside Australian Industry Group national president Chris Jenkins this week. It was jointly developed by Defence, Australian Industry Group, the Australian Signals Directorate (ASD), the Australian Security Intelligence Organisation (ASIO) and the Australian Cyber Security Centre (ACSC) over the past 12 months.

“The development of this guide has been a genuine team effort, drawing on deep expertise and connections across Government, Defence, Australian defence industry and industry associations,” said Price. “It has been developed by industry for industry and will help businesses understand what they need to do to improve their security practices.

“The guide also provides direction and support to current and prospective defence industry and supply chain providers on how to understand their security obligations and improve their security practices when delivering Defence capability.”

The percentage of businesses missing out on Defence work due to insufficient security measures has already prompted Defence to focus on providing support to applicants to improve their cyber security. Over the past year Defence has helped more than 600 companies improve their security through the Defence Industry Security Program (DISP).

The DISP supports Australian businesses to understand and meet their security obligations when engaging in Defence projects, contracts and tenders. Defence currently has more than 230 companies in the program.

The need to make more businesses ‘Defence-ready’ is underlined by the Government’s commitment of $15bn to cyber and information warfare capabilities over the coming decade. About $1.35bn will be spent combating malicious cyber activity, including $31m to enhance the ability of ASD to disrupt cybercrime offshore and $35m to deliver an enhanced cyber threat-sharing platform. Another $12m will go towards new strategic mitigations and active disruption options, and $118m will be spent expanding ASD’s data science and intelligence capabilities.

Price said the Working Securely with Defence guide complements her ‘five pillars’ approach to supporting Australian businesses by improving the way Defence communicates and does business with industry in relation to its security obligations.

“I am making sure Defence works with our industry partners, especially when it comes to cyber security, so that businesses can be ready and more experienced as we come back from COVID-19,” said Price .

Jenkins said Ai Group was very pleased to have partnered with the Government and Defence to develop the guide.

“The guide brings together a wealth of relevant information to assist the Defence industry and help build the security culture, compliance and resilience of the sector,” Jenkins said. “This is so important to the strategic priorities of Australia, ensuring that both industry and Defence are working on the same page.

“We would especially like to thank all those involved, including the Ai Group Defence Council members, who shared their time, knowledge, expertise, experience and insights in contributing to the development of this guide.”

The Working Securely with Defence guide can be accessed from the Defence:

www1.defence.gov.au/security/industry