Digitising Government New Zealand and the National Cyber Security Summit 2026, both being staged in Wellington next week, will continue the critical national conversation shaped recently by the release of the NZ Cybersecurity Strategy.
The myth of New Zealand’s geographic protection has officially evaporated in the digital age. The Government’s new strategy report reveals a pressing challenge: protecting our digital way of life. With cybercrime now costing New Zealanders an estimated $1.6 billion annually, the stakes are no longer just technical – they are national.
As 91% of us interact online daily, the ubiquity of technology has created a massive surface area for cyber attacks. Proactive action is now the essential foundation for our future economic prosperity and safety.
The urgency of this strategy is underscored by recent incidents, notably:
- The 2021 Parliamentary Breach: A sophisticated intrusion by APT40 (affiliated with the PRC) that compromised internal networks, later publicly called out by the Government in 2024.
- The 2021 Waikato Health Board Attack: A devastating ransomware incident that paralyzed hospital services, endangering patient lives and forcing a massive manual recovery effort.
- The 2024 CrowdStrike Outage: While not a malicious attack, this global IT collapse caused supermarket queues and airport chaos in New Zealand, exposing our extreme dependence on fragile digital supply chains.
- The 2025 Manage My Health Leak: A targeted extortion attack where 100,000 patients had sensitive personal records stolen, threatening individual privacy.
To combat these evolving threats, the Government has outlined an all-of-society four-pillar strategy for the next five years:
1: Understand aims to eliminate complacency by establishing a single, streamlined cyber security reporting service. By unifying a currently fragmented landscape, the NCSC will create a clearer national threat picture and ensure all New Zealanders – from households to CEOs – know exactly where to turn for help.
2: Prevent and Prepare focuses on “hardening the target” through a new regulatory regime for critical infrastructure. This ensures essential services like power and water meet mandatory security standards, while government agencies adopt stricter procurement rules to ensure security is built into all new technology from the start.
3: Respond accepts that no system is unhackable and prioritizes modernizing legislation to give law enforcement better tools to disrupt borderless threats. The strategy shifts toward “bouncing forward” from incidents, pledging stronger support for victims to remediate harm when personal data is stolen or exploited.
4: Partner recognizes that digital threats require a collective defense. By deepening international and Pacific alliances, New Zealand aims to shape global safety norms. Closer ties with the private sector will enable free-flowing threat intelligence, allowing government and industry to block malicious activity before it reaches our shores.
Details in their full report:
https://www.dpmc.govt.nz/sites/default/files/2026-02/nz-cyber-security-strategy-2026-30.pdf
Continue this important national conversation in Wellington next week:
► Digitising Government New Zealand | 18 March 2026 Tākina, WLG
► National Cyber Security Summit 2026 | 17-18 March 2026 Tākina, WLG
Be the first to comment