Tas Small Business Exposed on Cyber Security: Survey

Tasmania’s tech sector has urged small businesses to strengthen their cyber defences after new Tasmanian survey results showed a clear gap between larger organisations and smaller employers.

The second TasICT, TCCI and Vision42 Tasmanian Cybersecurity and AI Survey found most medium and large Tasmanian organisations have adopted a cybersecurity management framework such as Essential Eight. However, 70 per cent of small Tasmanian organisations have not yet adopted a framework, leaving them more exposed to cyber incidents.

TasICT CEO Russell Kelly said the results showed Tasmania needed practical support for smaller businesses as cyber risk increased and AI use became more common.

“Small businesses are part of Tasmania’s digital economy, but many do not have the time, staff or budget to fully understand cyber security risks and prepare appropriately,” Mr Kelly said.

“Getting started can be as simple as turning on two-factor authentication on accounts and having a written plan on what to do if they fall victim to a scam or cyber attack.”

The survey also found AI adoption is continuing to grow. Seventy-five per cent of Tasmanian organisations reported using AI, up from 65 per cent in 2025. The most common uses were content generation, data analysis, and sales and service support.

TCCI Acting CEO Colleen Reardon said AI created opportunities for productivity and service delivery, but it also increased the need for careful cyber management.

“In Tasmania, more small businesses are adopting AI, but awareness of the associated threats, risk exposure, and appropriate cyber defences is not always keeping pace – leaving some businesses vulnerable.”

In its second year, the annual Cyber Security and AI survey was conducted by Vision42 via the TCCI and TasICT.

Vision42 Director Justin Collins said cyber security management would need to improve as AI became more widely used.

“AI will turbocharge external cyber attacks and internal AI adoption will expose organisations to new cyber security risks,” Mr Collins said.

REGISTRATIONS NOW OPEN: TasICT is proud to welcome Professor Debi Ashenden to Tasmania for the TasICT-AISA Cyber Security Conference on 20 August 2026. Places are strictly limited and the conference is expected to reach capacity. Registrations are open at the Conference website. Essential Eight FAQ