Contents

Summary and recommendations 7

Background 7

Conclusion 7

Supporting findings 8

Recommendations 9

Summary of entity response 10

Key messages from this audit for all Australian Government entities 10

Audit findings 13

1 Background 14

Introduction 14

Preparations for the 2026 Census 15

Audit methodology 21

2 Controls to mitigate cyber security risks 22

Has the ABS identified and assessed cyber security risks related to the 2026 Census? 22

Is there monitoring of Census-related cyber security risks and issues? 28

Is the ABS conducting assurance and testing over cyber security controls? 34

Are there plans in place to address identified issues in cyber security controls in time for the 2026 Census? 44

Appendices 49

Appendix 1 Entity response 50