Introduction “The adversary doesn’t need a new attack vector, just an old weakness you never fixed.” Over the past 12 months, Australia has experienced a surge of high-profile cyberattacks impacting industries such as aviation, superannuation, and higher education. While each incident is individually significant, together they reveal a deeper issue, a systemic failure in executive cyber governance. The breach narratives may vary, but the patterns are consistent: symbolic leadership gestures, reactive containment, unclear third-party roles, and poorly coordinated communication strategies. What we’re seeing is not just an increase in cybercrime, but a lack of preparedness in the boardroom. For all the ...