The federal government has actually produced a “review framework” to determine the nationwide protection and supply chain protection dangers that innovation suppliers and their items might position.
The structure was a deliverable under the 2023-30 cyber protection technique.
“The government will develop a framework for assessing the national security risks presented by vendor products and services operating within and entering the Australian economy,” the strategy stated. [pdf]
“Using this framework, the government will help industry manage supply chain risks and make informed procurement decisions about the security of products and services.”
Minister for the Home Affairs and cyber protection profiles Tony Burke said in a statement that the structure is currently finished however will not be revealed.
This is “to ensure the integrity of the framework’s processes and protect information related to national security,” Burke claimed.
The structure isn’t almost thinking about dangers presented by specific suppliers and their innovation; it is likewise concerning alleviating those dangers “where necessary”.
“The majority of … vendors do not present a threat to Australia’s interests,” Burke claimed.
“However, understanding and handling the nationwide protection dangers provided by modern technologies which can be regulated or accessed by an international state is an expanding obstacle.
“If the vendor, through its product or service offerings, has access to sensitive systems or data, and has ties to a foreign government with interests which conflict with ours, there is a risk they could be compelled to act on behalf of that country against Australia’s national interest.”
Burke claimed the intent is to stabilize protection and development, making certain Australian organisations can access brand-new modern technologies securely.
He included that “consultation will be a key feature of reviews under the framework.”
“The Australian government will engage directly with organisations and end-users, as appropriate, to understand the risks introduced by a product or service, and mitigations that may already be in place.”
