PoliticalClaims.au

While the claim is factually accurate that the Coalition failed to comply with Top 4 cyber security strategies in multiple departments, a complete understanding requires acknowledging both the evidence and context: **The Coalition's Failures (Legitimate Criticism):** - Multiple ANAO audits documented objective non-compliance across departments [1][2][3] - Some failures were substantial: 1,400+ users bypassing whitelisting in Immigration, major patching failures across ATO [1][2] - PM&C specifically misrepresented its compliance status to auditors, raising accountability questions [3] - By 2021-22, 76% of government entities remained non-compliant, suggesting slow remediation [5] **Important Context (Why This Is Complex):** - This was not a Coalition-specific policy failure; Labor inherited the same non-compliance and made limited progress despite having the opportunity to prioritize it [5] - The technical barriers to implementation (legacy systems, whitelisting on older platforms) affected all governments [3] - The scale of the problem (76% non-compliance) indicates systemic infrastructure challenges rather than policy neglect—this would require major IT modernization investment - ANAO itself noted that full compliance required significant capital investment in system modernization and ongoing operational resources [3] - When Labor assumed government, it chose to expand the framework (Essential Eight) rather than focus on fixing existing gaps, suggesting similar resource constraints [4] **Key Context:** This is a real government cyber security failure that spanned the entire Coalition era (2013-2022), but it was not unique to the Coalition.