Lieutenant General Michelle McGuinness CSC has a clear message for Australian small businesses: cyber security is no longer something that sits only with IT.
As Australia’s National Cyber Security Coordinator, LTGEN McGuinness helps lead the Australian Government’s response to significant cyber incidents and supports national efforts to strengthen cyber resilience.
For small businesses, she says the shift is about responsibility, culture and preparation.
“The biggest shift is that cyber security is no longer a technical issue sitting with IT or technical offices,” LTGEN McGuinness says. “It is a core business responsibility.”
Small businesses are part of a bigger network
Many small businesses underestimate their role in Australia’s cyber security. They may think they are too small to be noticed, or that cyber criminals only target large organisations.
LTGEN McGuinness says the reality is different. Small businesses are often connected through suppliers, platforms, customers, payment systems and digital tools. A weakness in one business can create risk for others.
That is why strong cyber habits matter, even in a small team.
“Many small businesses still underestimate that they are an attractive target for cyber criminals and that they have a key role in the broader ecosystem,” she says.
Foundations matter
LTGEN McGuinness points to practical foundations as the best place to start. These include strong passphrases, multi-factor authentication, software updates, backups and clear incident response steps.
She also highlights the Australian Signals Directorate’s Essential Eight as a useful guide for reducing cyber risk.
Small businesses do not have to implement everything alone. They can ask their IT provider what is already in place, where the gaps are and what should be prioritised.
Good cyber security is not only about tools. It is also about people knowing what to look for and what to do next.
“Cyber capability is not about turning everyone into technical experts,” LTGEN McGuinness says. “It’s about building a human firewall.”
That means helping staff recognise risks early, question unusual requests and report problems quickly.
LTGEN McGuinness’s advice for small businesses
Take the basics seriously. Ask practical questions of your suppliers. Know where your data is stored and who can access it. Make sure your team knows how to report an incident.
Cyber Wardens training gives small businesses a practical way to build confidence across the team, one habit at a time.
