Reminder: New Cyber Security Regulations in Australia Becoming Mandatory

According to the Cyber Security (Security Standards for Smart Devices) Rules 2025 issued by the Australian Department of Home Affairs on March 4, 2025, all relevant smart devices must comply with Australia's cyber security requirements by March 4, 2026.

Key Requirements:

•  Unique Passwords: Devices cannot ship with generic default passwords (e.g. admin 123).  Each unit must have a unique, non-guessable password.

• Security Issue Reporting: Users must have a clear channel to report vulnerabilities in both hardware and software.

• Defined Support Period: Manufacturers must publish the duration of product support and security updates. This period cannot be shortened once declared.

• Statement of Compliance: A formal compliance statement must be prepared and kept on file by the manufacturer or authorised representative.

Should you have any question, please feel free to contact us:

Email: service@mrt-cert.com