The Defence Department – charged with overseeing the nation’s cybersecurity – has been castigated by the auditor-general over its failures to keep its own computer networks safe.

In a scathing report highlighting the risk to the military’s sensitive computer networks, Defence was found to have breached its own rules, with some IT systems not being authorised for use for up to three years.