The Secretary of the Department of Home Affairs has today issued a mandatory Direction under the Protective Security Policy Framework (PSPF) to government entities to manage a protective security risk to the Commonwealth.
Direction 002-2026 Strengthening Commonwealth Cyber Posture Against Al-Enabled Risks
PSPF Direction 002-2026 requires Australian Government entities to reduce cyber security risks arising from vulnerable legacy technology systems and to strengthen cyber posture across Australian Government systems.
Further information is provided in Policy Explanatory Note 002-2026 – Strengthening Commonwealth Cyber Security. Entities should also apply the advice provided in Policy Advisory 001-2026 – Cyber Security Readiness in the Frontier AI Era.
See Direction 002-2026 on the Directions page for more information.