Australia: Cyber Security Centre released guidance for individuals and small and medium businesses on cloud shared responsibility model

Description

Cyber Security Centre released guidance for individuals and small and medium businesses on cloud shared responsibility model

On 20 October 2025, the Australian Cyber Security Centre (ACSC) released guidance on the cloud shared responsibility model for individuals and small and medium businesses. It outlines how security responsibilities are divided between customers and c…

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: cloud computing, storage and databases
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2025-10-20
adopted

On 20 October 2025, the Australian Cyber Security Centre (ACSC) released guidance on the cloud shar…