Why Cyber Security is Now a Leadership Priority for Local Government CEOs
The 2025 CEO Index confirms cyber security is now the number one technology concern for Local Government CEOs. 24% say it keeps them awake at night, and recent case studies show why councils can no longer treat cyber risk as a technical issue alone.
The Scale of the Cyber Challenge
- Cyber security ranked as the top national technology priority for the second consecutive year.
- Just 10% of CEOs feel their systems are truly fit-for-purpose, while 64% express reservations or lack of confidence altogether.
- CEOs across metro and regional councils report equal levels of concern.
- Vendor lock-in and capability shortages compound the risk.
- Cyber security was first added to the survey three years ago—and while 2025 scores are higher than 2023, they are notably down from the 2024 peak, suggesting a settling of urgency post high-profile incidents.
Lessons from a Cyber Attack
Jacqui Weatherill, CEO of Greater Dandenong, shares her first-hand experience of a council-wide system shutdown:
“It’s not a matter of if, but when a cyber attack will target your organisation. The difference lies in how prepared you are to respond.”
By learning from this incident and implementing the key steps outlined above, Local Governments can enhance their resilience and better prepare for future cyber threats. As CEOs, fostering a culture of cyber resilience and continuous improvement are essential in safeguarding our digital assets and maintaining the trust of our communities.
Building a Culture of Cyber Resilience
Local Government CEOs increasingly recognise that technology alone cannot safeguard councils. True resilience depends on culture and leadership. Building a cyber-aware organisation means embedding accountability at every level, from councillors to frontline staff.
- Embedding cyber into enterprise risk frameworks so it receives the same attention as financial or compliance risks.
- Equipping executives and councillors with cyber awareness training to strengthen decision-making.
- Investing in people and processes—through incident response plans, drills, and clear communication, not just systems.
- Promoting shared responsibility across the organisation, where staff understand their role in keeping data secure.
These steps help councils move beyond compliance to cultivate a culture of vigilance, where resilience becomes second nature.
Conclusion
Cyber security is now firmly on the CEO agenda. Councils must view it as core to governance, trust, and service continuity.
Read the Australian Local Government CEO Index 2025 for deeper insights and recommendations.
About Davidson
Davidson is a proudly Australian company with more than 30 years of experience in enhancing workplace performance. With specialist teams in Business Advisory, Search and Recruitment, and Technology Consulting, Davidson partners with clients to deliver sustainable, outcome-driven solutions that make a lasting impact for organisations and communities.
Contact us today to discuss how we can support your council to enhance leadership, strengthen governance, and deliver transformation.
Share this content
