Background And Thematic Brief Relating To Cyber Matters In The UK And Eu, And Meeting Brief For Oracle Government Executives Held On 19 March 2025 ​

Written by Claude Haiku 4.5 from the extracted text on 16 May 2026. It can miss or misread redacted and scanned pages. Check the source before relying on it.

The Department of Home Affairs released a background brief and meeting brief on cybersecurity risks relating to UK and EU matters. The document details three mandatory security Directions issued under the Protective Security Policy Framework targeting vendors deemed to pose unacceptable security risks to Australian Government networks: Direction 001-2023 on TikTok (issued 4 April 2023), Direction 001-2025 on DeepSeek Products, Applications and Web Services (issued 4 February 2025), and Direction 002-2025 on Kaspersky Lab products and services (issued 21 February 2025). These Directions require non-corporate Commonwealth entities to identify and remove existing instances, prevent access or installation on Australian Government systems and mobile devices, and report compliance. The Department determined these applications extensively collect user data vulnerable to extrajudicial foreign government access, creating risks of foreign interference, espionage, and sabotage. The policy is framed as part of broader cybersecurity strategy implementation and the Technology Vendor Review Framework, with guidance published to assist organisations in assessing technology vendor security risks.