Australian Cyber Security Centre uses discredited data to quantify infosec threats

The cost of “cyber attacks” in Australia appears to be stabilising and the country has never been subject to an attack at the national scale, but the government's Cyber ForceTM (not its real name) is still pitching the growth of the threat. Along the way, an old and somewhat exaggerated estimate of the cost of cyber incidents …

[Frank Oz]

CERT vs ACSC

Mmmmm .... I trusted the old independent unfunded CERT for its timely reports and responses. Then the government bought in AusCERT, which was a totally different proposition ... a mob of government bureaucrats and amateur IT security wannabe's ... that morphed into the ACSC - which as far as I can see has done nothing to justify its humungous and ever-increasing budget in all the time it has been in place.

Still, it's run by the Australian government - so it must be 'world's best practice' ... right?

Is it just me, or would they have been better off simply giving the old CERT 25-50% of the budget the ACSC attracts - and relying on an independent body that actually worked and knew what they were doing?