Annual Security & Government Expo

Attendees, exhibitors & solutions

Who this event is for

New this edition

• 1

  —

  No verified 2025 post-show feature list was present in the evidence pack. Internet Archive snapshots from January-March 2025 are available as the best starting point for edition-by-edition changes, but they do not supply a confirmed new-feature list.

Industry trends

Key trends shaping this market and its wider industry.

Arrival airports

Choose from the following airports, with convenient access to the event and venue.

Hotel tiers

A range of accommodation options near the venue and across key areas.

Local transport

Get around the city with these convenient transport options.

Frequently asked

Glossary

1

Australian Signals Directorate (ASD)

The statutory agency within the Defence portfolio that leads Australia's foreign signals intelligence and cyber security effort and publishes Australian Government cyber guidance, including the Information Security Manual.

2

Australian Cyber Security Centre (ACSC)

The ACSC, part of ASD, coordinates national cyber threat advice, incident reporting and resilience guidance for Australian organisations and critical infrastructure operators.

3

Information Security Manual (ISM)

ASD's cyber security framework for Australian government agencies and their suppliers, covering governance, risk management and technical controls across systems and information.

4

Protective Security Policy Framework (PSPF)

The PSPF sets Australian Government requirements for governance, information, personnel and physical security, and is administered by the Attorney-General's Department.

5

Essential Eight

A prioritised set of eight mitigation strategies published by ASD: application control, patch applications, configure Microsoft Office macros, user application hardening, restrict administrative privileges, patch operating systems, multi-factor authentication and regular backups.

6

Security Operations Centre (SOC)

A centralised team and tooling function that monitors, detects, investigates and responds to security events across an organisation's IT and OT estate.

7

Security information and event management (SIEM)

Software that aggregates logs and alerts from across an estate, correlates events and supports investigation, detection and compliance reporting.

8

Security orchestration, automation and response (SOAR)

A platform that coordinates security tools and automates response workflows so analysts can triage and act on incidents faster.

9

Endpoint detection and response (EDR)

Endpoint security tooling that continuously records activity, detects suspicious behaviour and supports investigation and remote response on laptops, servers and other devices.

10

Zero Trust

A security model that removes implicit trust based on network location and instead verifies users, devices and access requests continuously against policy.

11

Identity and access management (IAM)

The policies and systems that manage who can access which applications, data and services, including authentication, authorisation and lifecycle management.

12

Privileged access management (PAM)

Controls that secure, monitor and audit high-privilege accounts and sessions, reducing the risk of administrative misuse or compromise.

13

Multi-factor authentication (MFA)

An authentication method that requires two or more independent factors, such as a password plus a hardware token or authenticator app, before access is granted.

14

Threat intelligence

Curated information about adversaries, tactics, techniques and campaigns that helps organisations prioritise detection and response.

15

Vulnerability management

A continuous process for identifying, prioritising, remediating and verifying security weaknesses across software, systems and infrastructure.

16

Penetration testing

An authorised simulated attack against agreed systems to identify exploitable weaknesses and validate controls before adversaries do.

17

Red teaming

Adversary simulation that tests people, processes and technology together, often beyond the scope of a conventional penetration test.

18

Insider threat

The risk that a person with legitimate access, whether malicious or negligent, misuses information or systems and causes harm.

19

Critical infrastructure

Physical and digital assets, systems and networks that are essential to a country's economy, security, health or safety, including energy, water, transport, communications and government services.

20

Security clearance

An Australian Government vetting process that assesses a person's suitability to access classified information. Common levels include Baseline, NV1, NV2 and Positive Vetting (PV).

21

Defence Industry Security Program (DISP)

A Defence program that helps Australian defence industry organisations meet security requirements for handling and storing protected defence information.

22

Hosting Certification Framework

An Australian Government framework for assessing and certifying cloud and data centre providers that host government information, with a focus on security and sovereignty controls.

23

Sovereign capability

The ability to control and assure critical technology, data, supply chains and expertise within a jurisdiction, rather than depending entirely on offshore providers.

24

Privacy Act 1988

Australia's principal privacy law, setting obligations for how many organisations collect, use, disclose, store and secure personal information.

25

Notifiable Data Breaches scheme

An Australian scheme requiring entities covered by the Privacy Act to notify affected individuals and the regulator about eligible data breaches that are likely to cause serious harm.

26

GovTech

Technology products and services designed for public-sector service delivery, regulation, citizen engagement or government operations.

27

Procurement panel

A pre-qualified list of suppliers or products established under agreed terms, which agencies can use to buy without running a full open tender each time.

28

Converged security

The integration of physical security, cyber security and operational technology security into a coordinated risk and response model.

29

Threat modelling

A structured method for identifying likely adversaries, attack paths and mitigations during system or service design.

30

Incident response plan

A documented set of roles, escalation paths, communications and technical steps used to manage and recover from a security incident.