10 years on and the government still can’t get the basics of Cyber Security right. The Auditor General report on “key internal controls” – or more specifically the Essential 8 – showed that most departments are failing to do this properly. Back around 2013/4 the then DSD published a set of four compulsory requirements for…