ASD (Australian Signals Directorate)

The Australian Signals Directorate (ASD) is the Commonwealth agency tasked with collecting foreign signals intelligence, securing Australian government communications, and conducting offensive cyber operations against offshore threats. Headquartered in Canberra, it operates under the Defence portfolio but became a statutory agency independent of the Department of Defence on 1 July 2018 following passage of amendments to the Intelligence Services Act 2001.

ASD's lineage runs back to the Defence Signals Bureau established in 1947, with successor names including the Defence Signals Division and Defence Signals Directorate before adopting its current title in 2013. The agency is a founding partner of the Five Eyes signals-intelligence alliance alongside the United States (NSA), United Kingdom (GCHQ), Canada (CSE), and New Zealand (GCSB), a relationship rooted in the post-war UKUSA Agreement.

Its principal functions include:

• Foreign SIGINT collection on matters relevant to Australia's national security, foreign relations, and economic well-being.
• Information security (INFOSEC) advice and accreditation for Commonwealth systems, published through the Information Security Manual (ISM).
• Offensive cyber operations, publicly acknowledged since 2016, used against terrorist groups such as ISIL and against offshore cybercriminals.
• Hosting the Australian Cyber Security Centre (ACSC), which coordinates national incident response and publishes threat advisories.

ASD also maintains the widely cited Essential Eight mitigation strategies, a baseline framework for hardening organisations against cyber intrusions. The Director-General of ASD reports to the Minister for Defence and is subject to oversight by the Inspector-General of Intelligence and Security (IGIS) and the Parliamentary Joint Committee on Intelligence and Security (PJCIS).

Under the AUKUS partnership announced in September 2021, ASD's role in cyber capability cooperation with the US and UK has expanded, and the 2023–2030 Australian Cyber Security Strategy further entrenched the agency as the operational centre of national cyber defence.