{"id":232267,"date":"2026-06-16T01:33:00","date_gmt":"2026-06-16T05:33:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/06\/16\/councils-failing-on-cybersecurity-government-news\/"},"modified":"2026-06-16T01:40:14","modified_gmt":"2026-06-16T05:40:14","slug":"councils-failing-on-cybersecurity-government-news","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/06\/16\/councils-failing-on-cybersecurity-government-news\/","title":{"rendered":"Councils failing on cybersecurity – Government News"},"content":{"rendered":"

Councils failing on cybersecurity – Government News<\/a><\/p>\n

https:\/\/www.governmentnews.com.au\/councils-failing-on-cybersecurity\/<\/a><\/p>\n

Publish Date: 2026-06-16 01:33:00<\/a><\/p>\n

Source Domain: www.governmentnews.com.au<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

Local governments lack basic cybersecurity controls, an expert tells GN.<\/p>\n

\u201cAccess management remains a major problem at many Australian councils,\u201d says Scott Hesford, from global cybersecurity company BeyondTrust. And as more aspects of operations and service delivery become digitised, councils are leaving themselves vulnerable to attacks. \u201cThe attack surface is broad and growing,\u201d says Hesford. \u00a0<\/p>\n

The local government sector faces annual scrutiny from auditors on the status and effectiveness of their security controls. \u201cThis improved openness and information sharing is critical to helping the sector to elevate its capability and maturity, with a view to being able to counter an evolving threat landscape over time,\u201d says Hesford.<\/p>\n

These assessments take on an even broader significance in the AI era, he adds. \u201cAs more councils adopt AI tools, in line with broader take-up trends in the public sector, there is a greater need for assurance around what systems and resources AI has access to, and how these non-human identities are managed.\u201d<\/p>\n

Scott Hesford (supplied)<\/p>\n

Recent assessments show access management remains the most problematic of all IT control issues experienced at the local government level. \u201cAuditors highlighted several areas requiring attention,\u201d says Hesford. \u201cThese include terminated accounts, dormant accounts, external or guest accounts, and accounts with privileged access that control who can make changes to the system.\u201d<\/p>\n

While the audits reveal many security weaknesses, Hesford tells GN progress is possible. \u201cWith the solutions and platforms that are available now and with targeted investments, improvements are within reach,\u201d he says.<\/p>\n

Indeed, some Victorian councils have shown themselves to be ahead of the game when it comes to addressing cybersecurity risks and embracing best-practice frameworks to uplift their controls. \u201cThat being said, the picture painted on a national basis suggests there is still work to do when it comes to addressing access control challenges,\u201d says Hesford.<\/p>\n

Hidden or indirect routes that can be exploited to elevate access and compromise key systems remain the most critical exposure points for many councils. \u201cThese paths enable attackers to gain footholds, compromise identities, escalate privileged access, and move laterally to undermine infrastructure itself,\u201d says Hesford. \u201cSome paths are known, others are unknown and vulnerable. And they are everywhere.\u201d<\/p>\n

Hesford advises councils to review their access management, and to adopt or mature privilege access controls. \u201cBy doing so, councils have the best chance of raising their own security and the collective security of the local government sector.\u201d<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Councils failing on cybersecurity – Government News https:\/\/www.governmentnews.com.au\/councils-failing-on-cybersecurity\/ Publish Date: 2026-06-16 01:33:00 Source Domain: www.governmentnews.com.au…<\/p>\n","protected":false},"author":1,"featured_media":232268,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.governmentnews.com.au\/wp-content\/uploads\/2026\/06\/iStock-2229882082.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,24],"class_list":["post-232267","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/232267"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=232267"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/232267\/revisions"}],"predecessor-version":[{"id":232269,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/232267\/revisions\/232269"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/232268"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=232267"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=232267"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=232267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}