Australians expect the government to have the authority to intervene to keep communities safe during a bushfire, flood or cyclone. The same principle should apply in the digital age, where cyberattacks can cripple hospitals, shut down ports or sever supply chains. That is why it matters the Australian parliament legislated Australia’s National Cyber Security Coordinator role last year.

The Cyber Security Act 2024 put the coordinator role—first created in mid-2023 as a convening hub inside government—on a statutory footing rather than relying on informal authority. It also introduced new provisions—most notably Part IV’s ‘limited use’ protections—which oblige the coordinator to use and share information voluntarily provided by an affected entity only for carefully defined purposes. Combined, these changes have ensured we are better prepared for Australia’s next major cyber storm.

Australia is no stranger to cyber disruption. Ports, hospitals, universities, telecommunications providers and supermarkets have all been targeted in recent years. More of the same should be expected. Each incident highlights the same truth: cyber threats spread in minutes, ignoring borders of geography, sector or institution. And in each instance, hesitation costs lives and livelihoods.

That is why trust and speed matter. The coordinator does not hold coercive powers; engagement remains voluntary. But the Cyber Security Act 2024 now entrenches legal protections for information shared by impacted entities during a cyber incident to build trust and confidence, essential for mounting a rapid and coordinated response. Previously, such protections were assumed. Now, information voluntarily shared with the coordinator (and with  the Australian Signals Directorate in accordance with the Intelligence Services Act 2001) during a cyber incident can only be used for narrowly defined purposes—namely, coordinating response, supporting recovery and informing national situational awareness. It cannot be repurposed for regulatory, enforcement or compliance action by other agencies. This limited-use protection ensures companies can be confident that, in the heat of an incident, they can disclose operational details without fear that those details will later be used against them.

While the coordinator reports directly to the Minister for Home Affairs, the Cyber Security Act 2024 deliberately sets the coordinator apart from the Minister or Secretary of Home Affairs who, under the Security of Critical Infrastructure Act 2024, do have the power to issue binding directions. Such direction powers—crafted after extensive consultation—are designed to be limited, proportionate and subject to parliamentary oversight. This separation preserves the coordinator’s role as a trusted crisis partner, not a regulator with teeth.

The coordinator’s value lies in stitching together government, industry and regulators when cyber storms hit. In the past, during cyber incidents valuable time has been lost navigating unclear authority lines, multiple regulators and competing business pressures. The new framework is a safety valve: in a digital disaster, the coordinator can cut through noise and ensure coordinated action when every minute counts.

This conversation is timely for three reasons. First, the legislated role and protections are freshly in force and being tested for the first time, and public understanding remains shallow. Second, the threat environment is worsening: ransomware campaigns, supply-chain compromises and attacks on critical infrastructure are accelerating in scale and sophistication. In this climate, the speed of response is as vital as technical capacity. Third, the debate itself matters. The government’s cyber strategy calls for whole-of-nation resilience, but misunderstanding the coordinator’s role risks undermining that partnership. It is important to clarify the coordinator’s essential role as a trusted partner—not an enforcer—as well as the information protections bound to the position. This will help normalise the idea that just as we accept emergency authority in bushfires and floods, cyber disasters deserve no less.

But the coordinator’s role is not only reactive. Just as a fire chief’s real value lies not in commanding hoses once flames are raging but in preparing communities before the blaze, so too is the coordinator’s day-to-day work focused on proactive prevention.

Working closely with strategy and policy branches within the Department of Home Affairs, the coordinator’s office leads national risk planning and preparedness: running scenario exercises and building resilience with industry, stress-testing infrastructure and supply chains, and ensuring that responses are rehearsed and fast. Crucially, this prevention and planning role is built on trust. Through the National Office of Cyber Security, the coordinator creates a space for frank, open discussions where even competitors can sit around the same table, share lessons from incidents and plan together. While information shared in these preparedness forums is not protected by legislation, industry has shown a willingness to engage because the process is underpinned by mutual confidence, trust and a recognition that resilience is a team sport.

Until now, much of Australia’s cybersecurity posture has been shaped by vendor-driven frameworks and industry-led guidelines. Though well-meaning, they are often fragmented and misaligned with national priorities. The coordinator’s role opens the door to something stronger: a coherent, government-led approach to defining standards, stress-testing assumptions and setting expectations across sectors. This means preparedness isn’t outsourced, and that national resilience is built on shared public interest, not distinct private risk models.

That’s why the coordinator’s dual mandate is vital—trusted coordinator in peace, safety valve in crisis. This bridges the gap between national strategy and operational reality, ensuring that when the lights flicker or networks go dark, Australia can act quickly, decisively and in unison. The coordinator’s role is not bureaucracy; it’s resilience. It provides clarity: reducing duplication, lowering confusion and ensuring that in a crisis companies aren’t left guessing which regulator to call or which playbook to follow.

Just as we empower emergency coordinators during floods or bushfires, the coordinator is our firebreak for the digital age—giving the nation confidence that when, not if, the next cyber storm comes, we will be ready.