As AI continues to drive digital transformation around the world, data centres are taking on a new role. They’re no longer just back-end infrastructure – they’re fast becoming prime targets in a shifting cybersecurity landscape. With the rapid rise of AI, cloud computing, and edge technologies, Australia is emerging as a key player in the Asia-Pacific’s data centre boom. But with that growth comes greater risk.
According to Vertiv’s 2025 Data Centre Trends, the convergence of IT, OT, and physical infrastructure systems in today’s highly connected data centre environment is creating broader, more complex attack surfaces. This is particularly significant across the Asia-Pacific region, where new digital infrastructure is being rolled out at scale and speed – especially in Australia, where the government is prioritising data resilience as a national strategic asset.
Control systems, embedded devices, and connected hardware and infrastructure systems are not always built to meet the same security requirements as other network components. Without proper diligence, even the most sophisticated data centre can be rendered vulnerable. The way forward is clear: cybersecurity must be embedded into the very DNA of digital infrastructure.
Why cyber resilience must be built in, not bolted on
In this landscape, traditional security models are no longer sufficient. Larger attack surfaces have created new vulnerabilities that cybercriminals can exploit – from unsecured sensors in edge deployments to misconfigured smart power devices.
What’s needed is a “cybersecurity by design” approach, where resilience is engineered into the infrastructure from the outset. For operators and enterprises alike, what this means is a need to rethink the role of physical infrastructure in defending against digital threats.
The rise of edge deployments and hybrid workloads means operators must now manage a vast ecosystem of interconnected devices – each introducing its own potential vulnerabilities. To stay ahead of evolving threats, infrastructure must not only perform reliably but also contribute to cyber resilience. This includes systems that provide real-time visibility, enable proactive monitoring, and help reduce the risk of misconfigurations, insider threats, as well as third-party exposures.
Intelligent infrastructure: The new security frontline
For data centre operators and enterprise CIOs, this is a pivotal moment. With cyber threats becoming more sophisticated, it is no longer enough to rely on isolated software defences. Physical infrastructure must play an active role in an organisation’s overall cyber resilience strategy.
The convergence of IT and OT systems is central to this shift. As edge deployments grow and systems become more distributed, unified monitoring and secure integration across IT and OT environments are essential.
At the same time, the regulatory landscape is shifting. Australia’s 2023-2030 Cyber Security Strategy outlines a roadmap to become one of the world’s most cyber-secure nations, with key initiatives focused on critical infrastructure resilience. The Security of Critical Infrastructure Act (SOCI) now mandates cybersecurity obligations for data storage and processing providers, placing pressure on operators to embed end-to-end security from design through deployment.
These policy shifts reflect a wider recognition that cybersecurity is no longer just the domain of IT teams. It is a shared responsibility across infrastructure, operations, and governance – one that must be built in at the design stage, not bolted on as an afterthought.
Building a more secure digital future
As AI becomes more deeply integrated into workloads, the consequences of a cyber-attack can be far-reaching, affecting everything from data integrity to operational continuity. The need for cybersecure data centres is particularly urgent in Australia.
The data centre of the future must be AI-ready, sustainable, and cyber-resilient by design. Operators and companies that succeed will be those that embrace this holistic mindset – aligning facilities, IT, and governance in a shared mission to protect infrastructure at every layer. Prime Minister Anthony Albanese recently welcomed over $20 billion private sector investment into Australian data infrastructure, reflecting the sector’s critical role in supporting the nation’s digital economy.
Because in today’s digital economy, the question is no longer whether cyber threats will occur, but how well are we built to withstand them.
