Cyber Security (Member of the Cyber Incident Review Board) Appointment (No. 2) 2026

Overview

The Cyber Security (Member of the Cyber Incident Review Board) Appointment (No. 2) 2026I, enacted on 28 April 2026, is an instrument made by Tony Burke, the Minister for Home Affairs and Minister for Cyber Security, under the authority granted by section 66 of the Cyber Security Act 2024. This legislation serves to appoint Valeska Bloch as a standing member of the Cyber Incident Review Board on a part-time basis, effective from 1 May 2026 for a term of four years. The primary aim of the Cyber Security Act 2024, as reflected in this appointment, is to bolster the capabilities of the Cyber Incident Review Board by ensuring it comprises individuals with requisite expertise and experience in the field of cybersecurity. This strategic move underscores the government's commitment to enhancing the nation's resilience against cyber threats and improving the framework for reviewing and responding to cyber incidents.

Scope and Application

The Cyber Security (Member of the Cyber Incident Review Board) Appointment (No. 2) 2026 instrument is a notifiable instrument issued by the Minister for Home Affairs and Minister for Cyber Security, Tony Burke, under section 66 of the Cyber Security Act 2024. This instrument appoints Valeska Bloch as a standing part-time member of the Cyber Incident Review Board for a period of four years commencing on 1 May 2026. The instrument applies directly to Valeska Bloch and indirectly to the operations and functions of the Cyber Incident Review Board, which is responsible for reviewing significant cyber incidents that impact Australia's cyber security. The appointment is made pursuant to the provisions of the Cyber Security Act 2024 and is subject to any rules or guidelines established under the Act. The instrument's scope is confined to the appointment of a board member and does not extend to other entities or individuals, nor does it alter existing legislative frameworks beyond the specified appointment. The geographic reach of this instrument is national, as the Cyber Security Act 2024 operates across Australia, addressing matters of national cyber security significance. The instrument does not specify any exclusions, exemptions, or thresholds, and its application is limited to the specific appointment as outlined.

Key Provisions

The main operative sections of the ADMIN 26/104 Cyber Security (Member of the Cyber Incident Review Board) Appointment (No. 2) 2026I, provide for the appointment of Valeska Bloch as a standing member of the Cyber Incident Review Board on a part-time basis. This appointment is effective for a period of four years starting on 1 May 2026, as stated in the legislation. This appointment aims to ensure that the Board has the necessary expertise and capacity to effectively carry out its responsibilities under the Cyber Security Act 2024. The Act imposes specific obligations on Valeska Bloch as a member of the Cyber Incident Review Board. These include attending meetings, contributing to the Board's deliberations and decisions, and participating in the review of significant cyber security incidents as required. Valeska Bloch must also adhere to the Board's code of conduct and any other relevant policies and procedures established by the Minister for Home Affairs and Minister for Cyber Security. These obligations ensure that the Board functions effectively and that its members contribute to the protection of Australia's critical infrastructure and national security. There are no explicit offences or penalties outlined in the ADMIN 26/104 Cyber Security (Member of the Cyber Incident Review Board) Appointment (No. 2) 2026I for breach of the obligations imposed on Valeska Bloch. However, failure to meet the obligations could lead to potential consequences such as termination of the appointment or other administrative actions as deemed appropriate by the Minister for Home Affairs and Minister for Cyber Security. While the legislation does not specify maximum penalties for breach, the consequences of not fulfilling the duties could significantly impact the effectiveness of the Cyber Incident Review Board and, by extension, Australia's cyber security posture. In summary, the ADMIN 26/104 Cyber Security (Member of the Cyber Incident Review Board) Appointment (No. 2) 2026I appoints Valeska Bloch as a part-time standing member of the Cyber Incident Review Board for a four-year term beginning on 1 May 2026. The legislation details the obligations on Valeska Bloch, including attending meetings and participating in incident reviews, while leaving potential consequences for non-compliance to the discretion of the appointing Minister. This appointment is a critical step in ensuring that the Board is well-equipped to address significant cyber security incidents and protect Australia's critical infrastructure and national security.