What's Happening?
The Association of Superannuation Funds of Australia (ASFA) has applied to the Australian Competition and Consumer Commission (ACCC) for authorization to establish a dedicated threat intelligence sharing platform. This initiative follows a series of cyberattacks
targeting the superannuation sector in 2025, which resulted in significant financial losses and highlighted communication failures among funds. ASFA's proposal includes the creation of the Superannuation Cyber and Financial Crime Exchange (SuperFCX), a platform designed to facilitate the sharing of threat intelligence among its members. The platform aims to improve coordination and response to cyber threats by sharing information on threat trends, tactics, and technical indicators, while explicitly excluding competitive intelligence such as pricing and commercial strategies. ASFA is seeking a five-year authorization for this initiative, which is part of a broader framework called SC3, developed to enhance the sector's cyber resilience.
Why It's Important?
The establishment of a threat intelligence sharing platform is crucial for the superannuation sector, which manages $4.5 trillion for 18 million Australians. The coordinated cyberattacks in 2025 exposed vulnerabilities in the sector's ability to communicate and respond to threats effectively. By facilitating the sharing of threat intelligence, ASFA aims to prevent future incidents and protect the financial assets of millions of Australians. The initiative also addresses reputational damage suffered by the sector due to inconsistent communication during past incidents. Furthermore, the proposal aligns with global concerns about the misuse of advanced technologies, such as artificial intelligence, in cybercrime. By enhancing coordination and preparedness, the superannuation sector can mitigate risks and maintain trust among its members.
What's Next?
ASFA's application is currently under review by the ACCC, with submissions closing on April 27. If approved, the SuperFCX platform will be implemented, providing a structured approach to threat intelligence sharing. This will involve the development of a sector incident response playbook and the organization of response exercises to simulate real-world scenarios. The initiative is expected to foster collaboration among superannuation funds and improve their collective ability to respond to cyber threats. Additionally, the sector will continue to monitor developments in artificial intelligence and other technologies that could impact cybersecurity, ensuring that they remain vigilant against emerging threats.
