A review by ASIO finds some of our critical assets not prepared for terror or malicious insider attack

AUSTRALIA’S top secret defence bases are under threat after an annual review by ASIO operatives found major security flaws.

MORE than half of the nation’s “Top Secret” classified facilities — including defence sites and state and federal government agency buildings — have failed their annual security review by domestic spy group ASIO.

The Federal Government’s so-called “Australian Government Protective Security Policy” was created specifically to protect growing international security threats including terrorism, espionage and foreign interference levelled against the country’s greatest secrets, assets and vital infrastructure and to ensure population safety.

But a mandated review in the last year of 80 of the nations “Zone 5 (Top Secret)” facilities by “ASIO-T4” operatives, the government’s specified certification authority, found 41 had failed to meet physical security certification levels.

ASIO concluded that while it had met its statutory obligation in conducting its inspections, it could only issue 39 clearances with “advice provided in other cases on measures needed to meet certification requirements”.

ASIO's $600 million headquarters in Canberra. Picture: Ray Strange

According to the domestic security group, Zone 5 facilities were ones where “the compromise, loss of integrity or unavailability of the information would have a catastrophic business impact level” and includes all facilities or zones that hold or Top Secret security classified information

including facilities managed by AirServices Australia like airport control towers or power and energy operations, certain government offices and the Australian Signals Directorate.

This year there was risk mitigation review emphasis on “malicious insiders”; facility recertification is required every five years.

ASIO declined for national security reasons to answer questions by News Corp Australia including which facilities had failed and why and what was now being done.

The 24/7 Operations Room during a tour of ASIO's headquarters. Picture: Ray Strange

It is understood physical security controls include ensuring anything from the construction and security features of a new building — such as radio frequency interference screens built into the brickwork to prevent external eavesdropping — are made at design stage through to CCTV cameras, perimeter access controls, visitor controls and guards.

It is known ASIO go as far as warning of counter hostile reconnaissance including advising pot plants not be placed near external windows with foreign powers having developed a way to potentially collect voice vibrations off leaves using radars pointed at them covertly from the street, with the algorithms later translated back into speech.

Last month a disc with a 1000-page manual detailing the security upgrade to Parliament House in Canberra was lost by military contractor BAE Systems although the Defence Department was satisfied it was a one-off security breach.

Originally published as A review by ASIO finds some of our critical assets not prepared for terror or malicious insider attack