Consumers feeling left out of cyber awareness conversation: Flinders University

As the conversation around cyber attacks and cyber awareness grows in Australia, consumers are wanting to play a more active role in building more resilient systems to reduce risks caused by hacking, online deception, bots and other threats. 

A Flinders University study investigated attitudes to institutional trust, understanding of resilience, digital literacy and perceptions of cyber threats.

In the past two months, Optus, Medibank, Woolworths and Telstra have suffered data breaches that have impacted their customers.  

Even before the escalation in recent cyber breaches of Optus and Medibank Private customer bases, citizens in the surveys were clearly not confident or optimistic that Australia is keeping pace with cyber threats and interference in the country’s economy, politics or society. 

Dr Josh Holloway, a researcher at Flinders University said these citizens are concerned about the technological capabilities of the government and have also highlighted doubts about investment in skills and commitments to cybersecurity among businesses.

He said, “Quite reasonably, they tended to have little awareness of which public institutions and authorities are taking leadership in managing cyber threats and, collectively, expressed broad scepticism of social media and tech companies, media organisations, the federal government and public service generally.”

While survey participants wanted more capability and responsibility from the public sector and corporations, their trust in this process was low.

The findings, published in the journal Defence Studies, showed the gap between Australian citizens’ knowledge and engagement and the broad response to cyber threats from top-down, technocratic and elite-driven agencies.

Co-author Associate Professor Robert Manwaring said Australian citizens’ confusion and lack of trust is not necessarily their fault. 

He said, “There’s generally little meaningful strategic effort to engage citizens in government-led responses, overlooking what’s often called the ‘social layer’ of cybersecurity. We need to encourage a genuinely whole-of-society approach – something which like Sweden and Finland are making considerable inroads.” 

The media also should play a greater role in informing the public and public debate around cyber threats. 

“There’s clearly scope for more nuanced, regular coverage of cyber risks – and one that is less focused on international ‘spectacle’ and reactive coverage,” he said.

“Australians need to be informed of the reality of cyber risk, and given the tools and information to participate in strategic efforts to enhance Australia’s cyber resilience, rather than just hearing about the fallout of successful cyber attacks.”