The ASD
Australian Signals Directorate
Status Tracked
The Commonwealth's cyber security agency. Services Australia notified it of the OpenAI incident on 15 September, and the government's own standard for agencies reporting incidents to it, the Protective Security Policy Framework, sets no fixed clock, only 'as soon as possible'; on ASD's 2025 figures, only 35 per cent of Commonwealth entities reported at least half the incidents they saw.
- First tracked
- 2026
- Last on record
- 2026-10-10
- Named in
- 5 articles
- Across
- 1 case
Named in 5 articles across 1 case 26 connections: companies 8, mechanisms 3, regulators and bodies 5, agencies and departments 4, police 2, people 4
Fig. 01 / Where this name appears
Fig. 02 / On the record
- "As soon as possible"The clock the Protective Security Policy Framework sets for a Commonwealth agency reporting a cyber security incident to the Australian Signals Directorate. There is no fixed number of hours.Nobody has to tell →
- As soon as possibleThe standard the Protective Security Policy Framework and ASD’s own Information Security Manual set for a Commonwealth agency reporting a cyber security incident to ASD. Neither sets a fixed number of hours or days.The inbox checked once a day →
How we know
The sources of the 5 articles that name the ASD, by the tier the desk declared. A source supports its article, not necessarily a claim about the ASD.
- Primary
- the document itself: legislation, a court record, a filing, a regulator’s own publication
- Official
- the organisation’s own statement about itself
- Masthead
- a news organisation with a corrections policy, reporting the primary document
- Trade
- specialist or trade press
- Aggregator
- republishes others’ work
- Unusable
- its own sourcing cannot be established
4 of 5 articles are graded on every headline finding. How findings are graded