Qantas cyber warning: Australia cannot wait for a national security crisis to act

3 November 2026 - For immediate release

ACS CEO Dr Prins Ralston said:

"Qantas is Australia's national carrier. Australians deserve confidence that the information they entrust to it is protected throughout its technology supply chain.

"Qantas says its own systems remain secure and is assessing whether bookings were affected. But following breaches affecting Medicare, the question is urgent: how many warnings does Australia need before taking stronger control of its digital security?

"ASD's cyber security centre responded to more than 1,500 incidents in 2025-26, up 20%. It also warns of state-sponsored actors accessing networks for intelligence collection and potential future disruption. The stakes extend well beyond stolen data.

"We cannot wait for essential services to fail before demanding evidence that their protections work. Boards and governments must insist on independent testing, clear accountability and demonstrated capability among the professionals securing and assessing these systems.

"Australia has resident technology professionals whose skills and experience have been independently assessed against Skills Framework for the Information Age (SFIA). Employers must put that verified capability to work when appointing people to secure and assess critical systems. Where their existing workforce has not been independently assessed, employers must take that step to verify capability, identify gaps and provide the training needed to close them."

"Our Digital Pulse 2026 report forecasts Australia will need another 259,000 technology workers by 2035. Meeting that demand requires broader pathways into the profession, practical skills training and clear standards so employers can verify capability."

"In cyber security, the ACS-led CyberPath pilot is advancing that work, informed by more than 2,000 engagement touchpoints across the cyber community. As we prepare to launch, government, industry and employers must come to the table and embed those standards in how they recruit, choose providers and assess cyber security work."

"Digital sovereignty depends on our ability to protect our information and keep essential services operating under pressure. Every breach reinforces the urgency to strengthen our defences. Australians deserve more than another investigation and another apology."

"ACS stands ready to work with government and industry to strengthen Australia's cyber capability. We always have. The urgency now demands that we act together."

ENDS

Further information

Troy Steer
Director of Corporate Affairs and Public Policy
M - 0417 173 740
E - [email protected]

About ACS

The Australian Computer Society (ACS) is the professional body for Australia's technology profession. Since 1966, we have championed a trusted, skilled, and world-class profession, representing 42,000 members across business, government and education, with branches in every Australian state and territory. Our work strengthens Australia's digital sovereignty, responsible AI adoption, cyber resilience, workforce capability and digital trust. We set professional standards, accredit education, certify practitioners and advocate for the skills and capabilities Australia needs. ACS is committed to advancing the profession and ensuring technology serves Australia's national interests and delivers lasting public value.