ASD issues boards with frontier AI cybersecurity guidance

The Australian Signals Directorate (ASD) has issued guidance for boards and company directors focusing on the cybersecurity threats posed by frontier AI.

These advanced AI capabilities can reduce vulnerability discovery from days to hours, the ASD said, while significantly lowering the skill and knowledge threshold for cyber criminals.

The ASD said organisations should enhance their cybersecurity fundamentals now, stating the immediate priorities should be securing attack surfaces and reducing software vulnerabilities.

Short term priorities include replacing legacy systems, reinforcing identity, credential and access management, and restricting unnecessary privileges, as well as making robust preparation for cybersecurity incidents.

Firms should also adopt AI for cyber defence purposes, while also modernising for the future.

“Organisations that fail to respond to frontier AI threats leave themselves exposed,” the ASD said in its guidance.

“Boards should be pressing management to act now to ensure their organisations do not fall victim to current and emerging frontier AI threats, including by supporting targeted investments to enhance cyber security and resilience where appropriate.”