A new report from the Queensland Auditor-General (Managing third-party cyber security risks) has highlighted some important lessons for the public sector. As local councils work more closely with outside partners – like software providers, consultants, and digital services – it’s becoming more important than ever to make sure these connections are secure.

While using outside experts helps councils run smoothly and offer better digital services, it also creates new ways for cyber-attacks to happen. The report found that many organisations aren’t yet fully aware of how a slip-up by a partner company could affect their own systems and the private information they hold.

Protecting Community Trust

For local government, staying safe online is about more than just computers—it is about keeping the trust of the local community. When a council’s data is well-protected, residents can feel confident that their personal details are handled with care.

Building a “human shield” against these threats is one of the most effective steps a council can take. This means making sure every staff member knows what to look out for and how to handle information safely.

Award-Winning Training for Your Team

GRC Solutions provides easy-to-use, award-winning online training that helps council staff understand their role in staying safe and compliant. We take the guesswork out of complex rules, turning them into practical, everyday habits that protect your organisation.

Our engaging training cover the most important areas for local government, including:

Building a Stronger Future Together

The Auditor-General’s advice is a great prompt for all of us to look at how we handle digital safety. By giving staff the right tools and knowledge, Councils can meet these high standards and create a culture where everyone plays a part in staying secure.

Our training is designed specifically for the Australian public sector, making it relevant, helpful, and easy to fit into a busy workday.

Explore our tailored courses for local government.

Read the report here, including a 2-page summary.

View the better practice guide here.