Government agencies in regional Australia are currently not using data centres – all of their infrastructure/servers are on site in their buildings. This leaves them at risk of outages and cyber-attacks, writes Aaron Little.

Our lives are deeply intertwined with digital services. From banking to healthcare, transportation to utilities, we rely on these essential systems every single day. But what happens when the infrastructure supporting these critical services is compromised? The consequences could be catastrophic for our nation’s well-being, security, and ability to function. 

That’s why the Australian government is taking proactive steps to enhance the resilience, security, and reliability of our critical infrastructure. And regional data centres are playing a pivotal role in this transformation.

Strengthening defences in a changing landscape

 The Security of Critical Infrastructure Act 2018 outlined legal obligations for owners and operators of critical assets across 12 sectors, including communications, energy, healthcare, and water supply. The goal is to protect the facilities, supply chains, and networks that underpin our social and economic well-being. 

But the government didn’t stop there. Recent amendments to the Act have broadened the definition of critical infrastructure, encompassing even more sectors like energy, water, transport, and telecommunications. This expansion means stronger regulations and protective measures for a wider range of essential services. 

And let’s not forget the harsh realities we’ve faced – from raging bushfires and devastating floods to the ongoing pandemic. These catastrophic events have exposed the vulnerabilities of our telecommunications networks, which are under immense pressure during crises. With digital services woven into our daily lives and economic activities, ensuring their resilience is non-negotiable. 

Centralised data centres an Achilles heel

While centralised data centres offer efficiency, they also harbour inherent risks. Their concentration in specific geographic locations makes them susceptible to natural disasters like earthquakes, floods, or fires. A single catastrophic event could disrupt critical services, compromise data integrity, and breach data sovereignty. Plus, relying on distant data centres can introduce latency issues, affecting user experience and operational efficiency. 

With the government’s push for enhanced resilience, security, and reliability through strategies like the Critical Infrastructure Resilience Strategy (CIRS), we can no longer solely depend on metropolitan centralised data centres. It’s time to explore alternative options to reduce the risk to our critical infrastructure. 

An ongoing battle

As our reliance on digital systems and networks grows, so does the threat of cyber-attacks. Malicious actors, from nation-states to criminal organisations, are constantly seeking vulnerabilities to exploit, putting our essential services at risk. 

To combat this challenge, the Australian Signals Directorate (ASD) has established guidelines and frameworks to enhance cybersecurity resilience. The Information Security Manual (ISM) and the Essential Eight Maturity Model provide comprehensive guidance for organisations to protect their systems and data from cyber threats.

Companies operating in critical infrastructure sectors must ensure they are in alignment with these guidelines, as they feed into the Critical Infrastructure Bill. Failure to comply can result in significant penalties and potential disruptions to operations. 

Mark Maloney, CEO of ICT Networks, a leading provider of secure telecommunications and networking solutions has noted that adhering to these cybersecurity standards is crucial for the future of critical infrastructure.

He says the threat landscape is constantly evolving, and cyber-attacks are becoming more sophisticated and targeted. Regional data centres play a vital role in mitigating these risks by providing geographic distribution and redundancy.

 By decentralising critical data and systems, it’s possible to reduce the potential impact of a successful cyber-attack on any single location. 

ICT Networks further highlighted the importance of regional data centres in enabling effective disaster recovery and business continuity plans, ensuring that essential services can be restored quickly in the event of a cyber incident or other disruption. 

Regional solution

As the digital landscape continues to evolve, the role of regional data centres in safeguarding Australia’s critical infrastructure will become increasingly paramount. By adhering to cybersecurity best practices, implementing robust security measures, and leveraging the resilience offered by distributed data centres, organisations can better protect themselves against the ever-present threat of cyber-attacks. 

How regional data centres can fortify the nation’s critical infrastructure: 

Enhancing Network Resilience 

• Data Sovereignty: Regional data centres comply with Australian regulations, preserving data sovereignty. Government and utility companies can confidently store sensitive information within their own borders. 

• Geographic Distribution: By strategically locating data centres across different regions, we reduce the risk of a physical cybersecurity threat and minimise a single point of failure through multiple fallback options. 

• Disaster Recovery: Regional data centres serve as the perfect disaster recovery sites. They replicate critical data and applications, allowing for swift restoration in case of network disruptions. When calamity strikes, data remains accessible, and operations continue seamlessly. 

Supporting At-Risk Communities 

• Emergency Coverage: Regional data centres can provide additional emergency coverage to high-risk areas, evacuation routes, and evacuation centres, ensuring essential services remain accessible during crises. 

• Community Safety: Prioritising community safety translates to improved health outcomes. Reliable telecommunications networks save lives by enabling timely communication and coordination. 

Economic and Social Benefits 

• Industry Performance: Classifying telecommunications as an essential service strengthens the case for network standards, raising overall industry performance and benefiting the overall economy. 

• Cost Considerations: While implementing reforms involves costs, the capacity demonstrated during the pandemic shows that both government and industry can deliver necessary changes. 

Navigating the digital future 

Australia’s critical infrastructure reforms are a proactive response to an increasingly destabilised world. By prioritising resilience and investing in regional data centres, we ensure that every Australian can rely on digital services, even in the face of adversity. These centres not only safeguard data sovereignty but also fortify resilience against natural disasters and cyber threats. 

As we navigate the digital future, regional data centres will play a crucial role in protecting our nation’s lifelines, ensuring the continuity of essential services, and safeguarding our way of life. 

*Aaron Little is Director of Technical Operations at Leading Edge Data Centres

Comment below to have your say on this story.

If you have a news story or tip-off, get in touch at editorial@governmentnews.com.au.  

Sign up to the Government News newsletter