The impact of the recent amendment to Australia’s Security of Critical Infrastructure Act on smaller companies within the electricity, gas, water and maritime supply chains is yet to be fully realised. Fergus Hanson, director of the Australian Strategic Policy Institute’s International Cyber Policy Centre and Derek Fittler, ANZ head of Verizon, discuss that while businesses across most industries generally now understand the impact and risk of a cybersecurity breach and the role they play from a vulnerability point of view, do they have the skillsets and cyber requirements to take action.