<!--The Official Report of Parliamentary Debates (Hansard) of the Legislative Council and the House of Assembly of the Parliament of South Australia are covered by parliamentary privilege. Republication by others is not afforded the same protection and may result in exposure to legal liability if the material is defamatory. You may copy and make use of excerpts of proceedings where (1) you attribute the Parliament as the source, (2) you assume the risk of liability if the manner of your use is defamatory, (3) you do not use the material for the purpose of advertising, satire or ridicule, or to misrepresent members of Parliament, and (4) your use of the extracts is fair, accurate and not misleading. Copyright in the Official Report of Parliamentary Debates is held by the Attorney-General of South Australia.-->
<hansard id="" tocId="" xml:lang="EN-AU" schemaVersion="1.0" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:xsi="http://www.w3.org/2007/XMLSchema-instance" xmlns:mml="http://www.w3.org/1998/Math/MathML" xsi:noNamespaceSchemaLocation="hansard_1_0.xsd">
  <name>House of Assembly</name>
  <date date="2021-05-04" />
  <sessionName>Fifty-Fourth Parliament, Second Session (54-2)</sessionName>
  <parliamentNum>54</parliamentNum>
  <sessionNum>2</sessionNum>
  <parliamentName>Parliament of South Australia</parliamentName>
  <house>House of Assembly</house>
  <venue></venue>
  <reviewStage>published</reviewStage>
  <startPage num="5000" />
  <endPage num="5414" />
  <dateModified time="2022-08-06T14:30:00+00:00" />
  <proceeding continued="true">
    <name>Question Time</name>
    <subject>
      <name>Cybersecurity</name>
      <text id="20210504a34b399ae66a4211b0000671">
        <heading>Cybersecurity</heading>
      </text>
      <talker role="member" id="4842" kind="question">
        <name>The Hon. S.C. MULLIGHAN</name>
        <house>House of Assembly</house>
        <electorate id="">Lee</electorate>
        <questions>
          <question date="2021-05-04">
            <name>Cybersecurity</name>
          </question>
        </questions>
        <startTime time="2021-05-04T16:06:59" />
        <text id="20210504a34b399ae66a4211b0000672">
          <timeStamp time="2021-05-04T16:06:59" />
          <by role="member" id="4842">The Hon. S.C. MULLIGHAN (Lee) (16:06):</by>  My question is to the Premier. Can the Premier advise the house when he was first advised about the major cyber attack on the state government's IT systems? With your leave, sir, and that of the house, I will explain.</text>
        <text id="20210504a34b399ae66a4211b0000673">Leave granted.</text>
      </talker>
      <talker role="member" id="4842" kind="question" continued="true">
        <name>The Hon. S.C. MULLIGHAN</name>
        <house>House of Assembly</house>
        <text id="20210504a34b399ae66a4211b0000674">
          <by role="member" id="4842">The Hon. S.C. MULLIGHAN:</by>  On Saturday, <term>The Advertiser's </term>Editor at Large, Paul Starick, reported that there was a major cyber attack on government computer networks in November last year requiring the activation of the State Crisis Centre.</text>
      </talker>
      <talker role="member" id="4338" kind="answer">
        <name>The Hon. S.S. MARSHALL</name>
        <house>House of Assembly</house>
        <electorate id="">Dunstan</electorate>
        <portfolios>
          <portfolio id="">
            <name>Premier</name>
          </portfolio>
        </portfolios>
        <startTime time="2021-05-04T16:07:33" />
        <text id="20210504a34b399ae66a4211b0000675">
          <timeStamp time="2021-05-04T16:07:33" />
          <by role="member" id="4338">The Hon. S.S. MARSHALL (Dunstan—Premier) (16:07):</by>  I thank the member for his question. As he would be aware, and as I think all members in this parliament are aware, there is an increased cyber incident activity going on around the world. This is nothing new. In fact, on coming to government I was informed, as the chair of the Emergency Management Council, of the sheer volume and the increasing volume of cyber incidents that are occurring here in South Australia and more specifically those that are occurring against government agencies. That is one of the reasons why in the most recent budget we made a very significant investment of $24.7 million into strengthening our cyber resilience and preparedness here in South Australia.</text>
        <text id="20210504a34b399ae66a4211b0000676">We also made a very significant additional investment into developing our workforce because, as members may or may not be aware, there is a very significant global shortage of suitably trained cyber qualified personnel. This is an issue that we recognised very early on on coming to government. I want to commend the Minister for Innovation and Skills for working with my department on creating a cyber traineeship for South Australia. We have committed an additional $2.6 million for that.</text>
        <text id="20210504a34b399ae66a4211b0000677">At the moment, I can inform the house that in 2020 there were approximately 1,600 cybersecurity incidents that were reported to the Office for Cyber Security by various SA government agencies. We don't routinely comment on any of those incidents unless it is in the public interest to do so. We take this matter extraordinarily seriously.</text>
        <text id="20210504a34b399ae66a4211b0000678">In recent years, we as a state have appointed a Chief Information Security Officer in this state. We have very significantly invested in our own preparedness. But, more than that, as a government we recognise that this is not problem peculiar to government: it's a problem for every business, every individual, and that's one of the reasons why at Lot Fourteen we have established the Australian Cyber Collaboration Centre, which is independent of the government. We have funded the capital and also the operating budgets for the first three years of that organisation, but that is designed to improve the overall cyber preparedness and resilience of South Australian businesses.</text>
        <page num="5048" />
        <text id="20210504a34b399ae66a4211b0000679">I've got to say, the interest in this area is only increasing. Pretty much on a daily basis now we are hearing about organisations who are experiencing cyber incidents. Some of those can be absolutely damaging and catastrophic on their business. We haven't had that situation in South Australia, but we have had cyber incidents and, as I said, we don't respond or make public any specific information on those unless it's in the public interest to do so.</text>
      </talker>
    </subject>
  </proceeding>
</hansard>