A recent cybersecurity audit conducted by the Queensland Audit Office has uncovered significant vulnerabilities within key government entities in Queensland. This audit, which aimed to evaluate the effectiveness of IT security controls across a state government agency, a local government entity, and a statutory body, has found that these organizations were largely unaware of their susceptibility to third-party cybersecurity threats. The report issued by Queensland's auditor-general highlighted a critical overlook of contract management practices, noting that only two out of 36 contracts scrutinized mandated that third-party vendors report any cybersecurity incidents or vulnerabilities. This lack of due diligence appears to... [Continue Reading]