Expressions of interest are open for the Expert Panel
The Cyber Incident Review Board (the Board) is seeking suitably qualified individuals to join the Expert Panel.
The Board is accepting expressions of interest (EOIs) for the Expert Panel. It will consider eligible candidates on an ongoing basis as vacancies arise or as particular expertise is required.
Eligibility requirements for appointment to the Expert Panel are provided by the Cyber Security (Cyber Incident Review Board) Rules 2025. Candidates will be assessed against the eligibility criteria, role requirements and in accordance with the APS merit principles. Successful applicants may be appointed to the Expert Panel and will form a pool from which appointments to a review panel may be drawn.
To be appointed to the Expert Panel, individuals must hold, or be eligible to hold, a Negative Vetting Level 1 (NV1) Australian Government security clearance.
For more information about eligibility and the role of the Expert Panel, see the Candidate Information Pack: Cyber Incident Review Board - Member, Expert Panel.
Submit Your Application Online
You must submit your application through the Cyber Incident Review Board Expert Panel applicant response form.
Applicants who have already submitted an EOI for the Expert Panel do not need to reapply unless they wish to update their information or provide more information for consideration.
About the Expert Panel
The Expert Panel supports the Board in undertaking no-fault, post-incident reviews of significant cyber security incidents in Australia. The Board also provides recommendations to government and industry to prevent, respond to or minimise the impact of similar incidents in the future.
Each review will be conducted by a review panel who is assigned based on their qualifications, knowledge, skills or experience in relation to the review. A review panel consists of:
- the Chair of the Board
- one or more Standing Members
- one or more members of the Expert Panel.
Duties of a member of a review panel may include:
- providing expert advice in relation to a review
- engagement with stakeholders affected by an incident
- assisting in the collection of information from stakeholders.
About the Cyber Incident Review Board
The Board is an independent statutory advisory body established under the Cyber Security Act 2024 (the Act).
The Board reviews significant cyber security incidents after response activities have concluded. It identifies lessons learned and provides recommendations to government and industry to help prevent, respond to and minimise the impact of similar incidents and uplift Australia’s cyber resilience in the future.
The Board may cause a review to be undertaken on written referral by either the Minister for Cyber Security, the National Cyber Security Coordinator, an impacted entity or a member of the Board.
The Board does not assign blame or determine who is responsible for an incident. Published review reports do not include personal or classified information, including anything that could affect national security, defence, or international relations of the Australian Government.
The Board is supported by a secretariat comprised of staff from the Department of Home Affairs.
Appointment of the Cyber Incident Review Board
On 1 May 2026, the Honourable Tony Burke MP, Minister for Home Affairs, Cyber Security and the Minister for the Arts, announced the appointment of the Board.
The Board is chaired by Ms Narelle Devine and comprises the following six standing members:
- Professor Debi Ashenden
- Ms Valeska Bloch
- Mrs Jessica Burleigh
- Mr Darren Kane
- Mr Berin Lautenbach
- Mr Nathan Morelli.
Report a cyber incident
The Board is not responsible for managing cyber security incidents. It only conducts reviews after response activities have concluded.
If there is an immediate threat to life or risk of harm, call 000.
You can report a cybercrime, incident or vulnerability online.
