Required actions
- Report ransomware payments to the Australian Signals Directorate within 72 hours - Manufacturers and suppliers of connected devices must meet mandatory security standards - Cooperate with the Cyber Incident Review Board; limited-use protections apply to information shared