Cyber Security Cooperative Research Centre

What Cyber Security Cooperative Research Centre does

The Cyber Security Cooperative Research Centre (CSCRC) is an Australian non-profit cooperative research centre, established in 2018 and headquartered in O'connell, Australia, that develops cyber security capability and capacity for Australia. It is a participant in the Australian Government's Cooperative Research Centre program, with institutional backing from the Department of Industry, Science, Energy and Resources. The organisation employs 11–50 staff and operates as a research consortium rather than a commercial software vendor.

CSCRC produces frank and fearless research and in-depth analysis on cyber security systems, the cyber ecosystem, and cyber threats. Its portfolio spans ransomware policy ("Exfiltrate, encrypt, extort" via ASPI), critical infrastructure protection (the "FLIGHT CRITICAL" drones initiative, solar inverter threat work, and the 2025 "Hardening Cyber Security Supply Chains" guide), AI-enabled threats ("Poison the Well"), cyber incident response governance ("Governing Through a Cyber Crisis"), and corporate-director guidance ("Cyber Security Governance Principles v2", refreshed November 2024). Knowledge dissemination occurs through the OptimShare research platform, publications repository, government and industry partner channels (notably AICD and ASPI), and media coverage in The Australian and Wall Street Journal.

The business model is grant- and partnership-funded rather than commercially priced. As a CRC, CSCRC does not sell software products or licence subscriptions; its primary "customers" in the stakeholder sense are Australian federal and state government agencies, critical infrastructure operators, and corporate directors and boards. Funding flows from the Commonwealth CRC program and industry participant contributions. The organisation sells no software, charges no licence fees, and generates no disclosed commercial revenue; its currency is policy influence, research outputs, and workforce development rather than product ARR.

Name

Cyber Security Cooperative Research Centre

Legal name

Cyber Security Cooperative Research Centre

Website

https://cybersecuritycrc.org.au

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

The Cyber Security Cooperative Research Centre (CSCRC) is an Australian non-profit research organisation producing policy research, governance frameworks, and analytical reports on ransomware, critical infrastructure, AI-enabled threats, and cyber incident response for Australian government agencies, critical infrastructure operators, and corporate directors.

Ownership category

akta.pro rank

Product category

Cyber Security Research & Policy Advisory

akta.pro primary industry

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

akta.pro secondary industries

Cyber Defense & Information Security (National Security) (BPAIAHAE), Security Awareness, Training & Compliance Attestation (HDADAIAJ), Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH)

Keywords

• Cyber security research
• Critical infrastructure protection
• Ransomware policy research
• Cyber governance frameworks
• Cyber workforce development

Headquarters

HQ city

O'connell

HQ country

Australia

HQ region

Oceania

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Distribution channels1 record

Marketing channels2 records

Core offering

CSCRC conducts applied cyber security research and produces policy briefs, governance frameworks, and analytical reports on topics including ransomware, critical infrastructure protection, drones and cyber-physical systems, solar inverter threats, AI/data integrity risks, and supply chain cyber security. It also cultivates cyber security research talent through its academic and industry research programs and provides governance guidance for Australian company directors on responding to cyber crises.

Product overview

The Cyber Security Cooperative Research Centre (CSCRC) is a research organization, not a product company. It operates as a cooperative research centre focused on developing cyber security capability, capacity, and talent for Australia. The organization produces research reports, policy guidance documents, and governance frameworks rather than commercial software products. Its portfolio includes the Cyber Security Governance Principles (v2), research initiatives like FLIGHT CRITICAL examining drones and critical infrastructure, ransomware policy work, and the OptimShare research platform. The organization functions as a research consortium rather than a technology product vendor.

Differentiator

Problem solved

Functional benefit

Products and services

• Cyber Security Governance Principles v2 Refreshed governance principles document capturing evolving cyber security risk environment, published 25/11/2024 in partnership with AICD, for Australian corporate directors and boards governing cyber risk.
• OptimShare Platform for sharing cyber security research outputs and supporting collaborative research initiatives across CSCRC's academic and industry partners.
• FLIGHT CRITICAL Research Program CSCRC research program examining the intersection of drones, cyber security, and critical infrastructure protection, producing research outputs for Australian critical infrastructure operators and policy makers.
• Ransomware Research Program CSCRC research program addressing ransomware threats, policy levers, and incentivisation strategies to support Australia's ransomware response, including the 'Exfiltrate, encrypt, extort' ASPI policy brief.

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Four partnerships are on record, tiered core, major and minor.

• Department of Industry, Science, Energy and ResourcescoreOthersGovernment partner supporting the CSCRC as part of the Australian Government's Cooperative Research Centre program. The Department provides institutional backing and alignment with national cyber security strategy.
• Australian Strategic Policy Institute (ASPI)majorStrategic or Co-development PartnerCollaborated on ransomware policy research, producing the 'Exfiltrate, encrypt, extort' policy brief authored by CSCRC's Rachael Falk and Anne-Louise Brown published through ASPI.
• Australian Institute of Company Directors (AICD)majorStrategic or Co-development PartnerPartnered on the Cyber Security Governance Principles v2, refreshed to capture evolving risk environment. The principles are hosted on AICD's platform for distribution to corporate directors.
• Corporates CompromisedminorOthersRelated initiative tracking Australian corporates compromised by cyber incidents, linked from CSCRC website as part of public awareness mission.

Recent moves6 records

Expansion highlights4 records

Broad incumbents

• MITRE Corporation: A US federally funded research and development organisation that operates the ATT&CK framework and produces cyber threat and governance guidance. MITRE's role in setting cyber best practice parallels CSCRC's governance work in Australia.
• Software Engineering Institute (SEI) at Carnegie Mellon: A federally funded research and development centre (FFRDC) addressing cyber security, software assurance and resilience. SEI is the international structural equivalent of CSCRC as a publicly funded cyber research organisation.
• ENISA (European Union Agency for Cybersecurity): The EU's dedicated cyber security agency producing policy guidance, threat analysis and governance frameworks. ENISA's governance publication programme closely parallels CSCRC's Cyber Security Governance Principles work.
• Center for Strategic and International Studies (CSIS): A major US policy think tank with active cyber policy and critical infrastructure programmes, comparable to CSCRC's remit of producing government-facing cyber policy analysis.
• Royal United Services Institute (RUSI): A UK defence and security think tank publishing policy research on cyber, ransomware and critical infrastructure threats, functioning as a comparable policy-research peer outside Australia.

Emerging players

• SANS Institute: A US-headquartered cyber security training and research organisation. SANS overlaps with CSCRC on workforce development, talent cultivation and applied cyber research dissemination.

Direct peers

• Australian Strategic Policy Institute (ASPI): Australia's leading defence and strategic policy think tank, ASPI publishes cyber and critical-infrastructure policy research (e.g. the 'Exfiltrate, encrypt, extort' ransomware brief produced jointly with CSCRC) and operates as the closest direct peer in Australian cyber policy research.
• CSIRO's Data61: CSIRO's digital research unit conducts cyber security and critical-infrastructure research with strong ties to the Australian Government, making it the closest domestically-funded functional peer to CSCRC.

Regional players

• AustCyber / Stone & Chalk (Cyber Capability Australia): Australia's industry-led cyber security growth network, supporting capability development and commercialisation. It overlaps with CSCRC on workforce and ecosystem building within Australia.
• CyberCX: Australia's largest domestic cyber security services firm, conducting applied research and advisory work on critical infrastructure, ransomware and incident response — a commercial counterpart to CSCRC's research mission.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/cyber-security-cooperative-research-centre

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyber Security Cooperative Research Centre