Australia establishes a commission of inquiry into major cyberattacks

The Australian government announced on May 4, 2026, the creation of the Cyber Incident Review Board, a commission tasked with conducting independent investigations following major cyberattacks targeting either government entities or the private sector. Its reports will focus on systemic lessons learned rather than assigning blame to individuals or companies. The aim is to help strengthen the resilience of sensitive information systems in Australia.

Tony Burke, Australia’s Minister for Home Affairs and Cyber Security, announced the appointment of the board’s seven members, the majority of whom are women. The chair is Narelle Devine, CISO of Telstra, Australia’s leading telecommunications operator.

The commission is modeled on a similar body in the United States, the Cyber Safety Review Board, established by the Biden administration in 2022. The committee published three reports before being dissolved by Donald Trump upon his return to the White House in early 2025. At the time, the Cyber Safety Review Board was investigating “Salt Typhoon,” a large-scale Chinese cyber espionage operation targeting the telecommunications sector.