Mar 2, 2026
Australia’s cyber security workforce is growing fast. But it’s also fragmented, inconsistent, and under pressure. Skills shortages persist. Career pathways are unclear. Employers struggle to define what ‘good’ looks like. And educators work hard to align with industry.
CyberPath is a government-backed pilot program to build a standardised, inclusive and highly skilled cyber security workforce. The goal is to bring clarity to industry complexity with a structured, nationally aligned framework that standardises career and education pathways, skills requirements and recognition frameworks.
Historically, cyber security has evolved quickly and informally. That speed has delivered innovation, but it has also created inconsistency. Job titles vary widely. Competency expectations differ between organisations.
CyberPath will introduce a nationally aligned, evidence-based framework that standardises role definitions and competency expectations.
This creates value across the industry:
Employers gain a clear link between organisational strategy, risk and workforce capability needs
HR teams integrate consistent and inclusive standards into job design and recruitment
People leaders use structured competencies for coaching, performance conversations and development planning
Procurement teams reduce ambiguity when engaging vendors and outsourcing capabilities
Professionals gain clearer expectations about cyber responsibilities and accountabilities in thier work
Clear standards improve operational resilience and preparedness. When competencies are defined and documented, organisations reduce person dependence and strengthen continuity.
Budgeting also becomes more defensible. Leaders can model the cost of workforce uplift with confidence, linking investment directly to risk reduction, regulatory alignment, maturity and operational stability.
For the government, consistent standards support national resilience and workforce planning at scale. For the industry, they create comparability, credibility, and greater employee mobility.
Consistency does not mean rigidity. It means a shared foundation that organisations of all sizes can scale proportionally, from large enterprises with specialised teams to small organisations building foundational capability.
Collaborate with industry partners to build a standardised, inclusive and highly skilled cyber security workforce.
Have your say and complete the CyberPath survey by 2 April.