BAE Systems Australia, Saab Australia join forces in new cyber security tool

Defence giants have joined forces to develop a new tool aimed at helping SMEs protect themselves against the growing cyber security threat.

Defence companies BAE Systems Australia and Saab Australia have led the development of a new cyber security tool aimed at helping small and medium-sized businesses secure work on major defence projects.

Known as Cyber Framework for the Defence Industry (CFDI), the tool offers a standardised approach to cyber maturity assessment and can also guide users as to steps they can take to increase their levels of cyber protection.

BAE Systems Australia chief information & digital officer Michael Salas said CFDI was developed to address the growing cyber risk facing SMEs, which often didn’t have the same level of cyber resources and protections as the larger defence contractors.

“We want more Australian SMEs to provide services and new technologies into defence programs because a more diverse supply chain enables greater levels of innovation,” he said.

BAE Systems Australia chief information & digital officer Michael Salas, Defence Teaming Centre chief executive Audra McCarthy and Saab Australia managing director Andy Keough. Picture: James Elsby

“The cyber framework is a great start for SMEs wanting to self-assess their level of cyber risk. They can undertake a quick assessment of their cyber maturity, which then leads to the identification of key areas to invest and improve a company’s defences.”

BAE and Saab worked with industry partners and government bodies to develop CFDI, which has already been adopted by 12 prime defence contractors including Thales, Boeing, Lockheed Martin and Rheinmetall.

The questionnaire and evaluation process is based on global standards such as the Australian Cyber Security Centre’s Information Security Manual and the US National Institute of Standards and Technology’s Cybersecurity Framework.

Saab Australia managing director Andy Keough said CFDI would raise the level of cyber security and resilience of SMEs, thereby opening up more opportunities for them to be engaged on major defence projects.

“The new framework will reduce barriers to entry for SMEs into defence supply chains by providing a common cyber assessment tool,” he said.

“Currently SMEs face a different and complex security assessment process each time they work with a different defence prime.

“In developing this framework we have reduced red tape, making it easier for SMEs to secure opportunities in the defence sector.”

Defence Teaming Centre chief executive Audra McCarthy welcomed development of the new cyber security tool, and the extra support for SMEs seeking work on defence projects.

“The CFDI tool is an excellent example of industry collaboration by defence primes to assist Australian SMEs improve the security of defence supply chains,” she said.

“It’s easy for SMEs to use, and most importantly, it empowers SMEs to manage their security function by demystifying and simplifying the compliance requirements.”