Global Mechanism on ICTs in the Context of International Security, first plenary session – 20-24 July 2026
Australian Statement on Existing and Potential Threats
Statement delivered by Mr Nathan Whiteman, Australian Department of Foreign Affairs and Trade
21 July 2026
Australia aligns itself with the statement delivered on behalf of the Pacific Islands Forum, and would like to make a few comments in our national capacity.
As we begin the work of the Global Mechanism, our discussions on threats should be current, evidence-based and connected to practical implementation of the framework of responsible State behaviour in cyberspace. The cyber threat environment continues to intensify. Individuals, businesses, and governments continue to be adversely affected. These threats can expose sensitive information, disrupt essential services, undermine trust and economic prosperity and, contribute to risks to international peace and security.
These threats are real. Last year, the Australian Cyber Security Centre responded to over 1,200 cyber security incidents and received more than 84,700 cybercrime reports, roughly one report every six minutes. No country is immune to persistent threats. These include state-sponsored activity targeting government, critical infrastructure and businesses; ransomware and cybercrime-as-a-service; business email compromise; identity fraud; and exploitation of edge devices and systems.
This Mechanism should help States understand how these threats affect us, the practical steps that reduce risk, and how international cooperation can support mitigation, preparedness and response. The tools already available to us — international law, the norms of responsible State behaviour, confidence-building measures and effective capacity-building — are well placed to help States meet these threats in a practical and coordinated way.
Critical infrastructure and Critical information infrastructure protection should be an early focus for this Mechanism, including through DTG 1. For many countries, including in our region, the resilience of undersea cable infrastructure is fundamental to economic and social connectivity, and to access to the global internet.
The Mechanism should also help States understand and respond to the ways emerging technologies are changing the scale, speed and character of malicious activity. Artificial Intelligence is being used to scale social engineering, create more convincing phishing content, analyse stolen data, and lower the cost and skill barriers required to cause harm. Australia is particularly concerned that AI is making it easier for malicious actors to generate and spread propaganda, and to prepare to carry out physical strikes, by supporting planning and target selection. As capabilities advance, AI may also enhance the ability of malicious actors to coordinate complex activities that combine physical and digital elements.
Australia underlines the importance of responding to these threats, in line with the agreed norms of responsible State behaviour. State responses, including the development and use of cyber capabilities, must be consistent with international law, including the UN Charter in its entirety, international human rights law and international humanitarian law.
All States must be supported to build capacity to implement the framework and respond to the threats they are facing. Cyber threats are shared, but their impacts are not experienced equally. Differences in national capacity can affect vulnerability to malicious cyber activity, and the ability to recover when incidents occur.
Australia looks forward to working with all States as well as you, Chair, to ensure our discussions on threats, particularly within the DTGs, remain current, practical and directed towards implementation.
Thank you.