4 November 2026 - For Immediate Release
ACS CEO Dr Prins Ralston said:
“Yesterday, we were responding to a cyber incident involving Qantas’s technology supplier. Today, it is NSW Health. These are services Australians depend on, and the warnings keep coming. Each incident raises the same question; can organisations demonstrate that their protections work and that the people responsible have the capability to protect them.
“Patients trust the health system with personal information and protecting it is part of the responsibility that comes with providing their care.
“Health Minister Ryan Park said no patient data or clinical service had been impacted. He also described NSW Health's cybersecurity systems as very robust and also acknowledged the need for government agencies to strengthen their systems against criminal activity and threats. If reports are confirmed, the attacker exploited an existing weakness: a misconfigured subdomain. This reinforces why organisations need trusted and capable professionals.
“Transport Minister John Graham is right that cyber security is becoming harder across government, business and the community. The NSW Audit Office has already raised serious concerns about cyber security in Local Health Districts, including their preparedness to respond to incidents.
“The question is how government and industry can demonstrate that those protections are working and how we can trust the people doing it. Evidence is needed that security controls work, recovery plans have been tested, and the professionals responsible are capable with independently verified skills.
“That is part of the work we are advancing through the ACS-led CyberPath pilot, informed by more than 2,000 engagement touchpoints across the cyber community. Government, industry and employers need to help put clear cyber security capability standards into practice.
“Australians deserve confidence that their information is protected and essential services can keep operating under pressure. That confidence has to be backed by evidence.
“We need to move on this now.”
The CyberPath pilot starts in February. Employers and cyber security practitioners can register as early adopters at https://www.cyberpath.org.au/get-involved/MVP.html
ENDS
Further information
Troy Steer
Director of Corporate Affairs and Public Policy
M – 0417 173 740
E – troy.steer@acs.org.au
About ACS
The Australian Computer Society (ACS) is the professional body for Australia’s technology profession. Since 1966, we have championed a trusted, skilled, and world-class profession, representing 42,000 members across business, government and education, with branches in every Australian state and territory. Our work strengthens Australia’s digital sovereignty, responsible AI adoption, cyber resilience, workforce capability and digital trust. We set professional standards, accredit education, certify practitioners and advocate for the skills and capabilities Australia needs. ACS is committed to advancing the profession and ensuring technology serves Australia’s national interests and delivers lasting public value.
About Cyberpath
CyberPath is a Commonwealth grant-funded cyber professionalisation pilot led by ACS which brings together industry, government and education to standardise career and education pathways, skills requirements and recognition frameworks for cyber security.