NSW Auditor-General Margaret Crawford has belatedly published an audit report critical of the cyber security hygiene failings of NSW government agencies.  The audit, conducted in June 2020, found widespread “non-compliance and significant weaknesses” in 99 of the 104 agencies that self-assessed their cyber security maturity. 

In the foreword of her report, Crawford states she ‘reluctantly agreed to modify my report to anonymise agencies and their specific failings because the vulnerabilities identified have not yet been remedied. Time, leadership and prioritised action should have been sufficient for agencies to improve their cyber safeguards.’