Key Compliance Dates for Businesses

The Cyber Security Act introduces a phased approach to national cyber readiness. These key compliance milestones reflect how Australia is moving from awareness to accountability — giving businesses time to build maturity before enforcement begins.

29th

Nov 2024

Act receives Royal Assent—Australia’s first economy-wide cyber-security law begins

30th

May 2025

Mandatory ransomware-payment reporting starts; 72-hour deadline for businesses with ≥ $3 m turnover

01st

Jan 2026

Education-first phase 30 May - 31 Dec 2025. Enforcement and fines kick in from 2026

3 Core Business Duties

The Act sets clear expectations for how Australian businesses handle cyber incidents. Understanding these duties helps you respond lawfully, protect your organisation’s reputation, and contribute to a safer digital economy.

Report Ransom or Extortion Payments

If your annual turnover is ≥ AU $3 million, you must lodge a Payment Report within 72 hours of paying (or learning of) a ransom

Share Details Under Protection

Voluntarily brief the National Cyber Security Coordinator during or after an incident—information is shielded from most regulatory or legal action

Participate In Post-Incident Reviews

You may be invited (or required) to supply information to be published in lessons-learned reports without blame or liability

Does the Act Affect Your Business?

Do you turn over ≥ $3 million a year in Australia?

Businesses above this threshold are classed as “reporting business entities” and must lodge any ransomware-payment report within 72 hours.

Visit Home Affairs For More Info

Are you responsible entity for a critical-infrastructure?

Critical-infrastructure operators under the SOCI Act are in scope regardless of annual revenue.

Visit CISC For More Info

Have (or could) you paid a ransom or other cyber-extortion demand?

If the answer is yes and you meet either of the above criteria, a formal report is mandatory.

Visit Home Affairs For More Info

Compare DefenderSuite Plans

Foundational
Cybersecurity & Compliance

Small to Medium Businesses

$20.95

per user
per month

Calculate Your Plan

Plan Inclusions
Fundamental Controls Plus

Compliance Alignment

Compare Plans in Detail Get Started Today

Advanced
Cybersecurity & Compliance

Small to Medium Businesses

$35.95

per user
per month

Calculate Your Plan

Plan Inclusions
Everything DefenderBasic Plus

1 TB

Compliance Alignment

Compare Plans in Detail Get Started Today

Complete
Cybersecurity & Compliance

Medium to Large Businesses

Compliance-Aligned Cybersecurity Tailored to Industry Demands

For SMBs and enterprises managing sensitive client data, regulated workloads, or complex supply chains, DefenderSuite delivers the visibility, assurance, and compliance alignment to stay secure and audit-ready.