Australian Leaders “Overly Optimistic” About Ability to Manage Cyber Incidents: Datacom

Why It Matters

Over‑optimistic recovery expectations leave organisations vulnerable to prolonged outages, eroding customer trust and supply‑chain stability. Addressing the preparedness shortfall is critical as AI‑driven threats accelerate and geopolitical tensions heighten data‑sovereignty risks.

Key Takeaways

• Only 32% have tested continuity plans despite 39% expecting quick recovery
• AI-driven attacks compress breach timelines from weeks to hours
• Data sovereignty concerns rise, but government action remains limited
• 70% believe resources suffice, yet only 30% have recovery plans in NZ
• AI security adoption deemed essential to offset workforce shortages

Pulse Analysis

The Datacom survey of more than 700 security leaders reveals a paradox: executives are confident they can see and manage cyber risks, yet the majority lack the rehearsed response mechanisms needed when an attack strikes. With just a third of Australian firms and a similar share in New Zealand possessing tested continuity plans, the industry faces a preparedness gap that could translate into weeks of downtime, lost revenue, and damaged brand equity. This disconnect underscores the need for organizations to move beyond monitoring tools and embed regular recovery drills into their operational DNA.

Compounding the readiness challenge is the rapid rise of AI‑enabled threats. Synthetic identities, deep‑fake phishing, and automated exploit kits can breach defenses in hours, compressing attack lifecycles that once unfolded over weeks. Security leaders now cite AI‑based attacks as their top concern, prompting a shift toward AI‑driven detection and response platforms. These technologies promise to augment limited security staff, delivering real‑time analytics and automated containment that human teams alone cannot sustain.

Meanwhile, data‑sovereignty anxieties are gaining traction amid geopolitical uncertainty. More than half of Australian respondents worry about the location of their data and the resilience of local AI compute, yet governmental policies lag behind peers in the EU, South Korea, and China. Without decisive regulatory pressure or a catalyst event, many critical sectors—government, health, and infrastructure—remain exposed. Companies that proactively migrate workloads to sovereign clouds and embed data‑locality controls will not only mitigate compliance risk but also strengthen their overall cyber resilience.