This audit would assess the effectiveness of NBN Co Limited’s strategies to manage its transition from building to operating the national broadband network (NBN). While NBN Co will continue to have a build commitment for new developments and ‘complex connections’, construction of the NBN ‘volume rollout’ is scheduled for completion by June 2020, followed by a further 18-month timeframe for completing the migration from previous infrastructure to the NBN.

The transition of NBN Co’s operating model from network construction to one focusing on ongoing network operations was identified as a key risk in the NBN Co Corporate Plan 2020–23. The audit would examine the extent to which NBN Co has established and implemented measures to address this risk.

The audit would continue the ANAO’s series of audits of cyber security. The scope would include comparing the entities’ cyber security framework and controls against the mandatory controls required under the Protective Security Policy Framework and the Australian Signals Directorate’s Essential Eight Maturity Model.