Australian Signals Directorate

ASD

Australia's signals-intelligence and offensive-cyber agency, with origins in wartime Australian signals operations and a founding role in the Five Eyes partnership.

Audio readout of this profile.

Overview

The Australian Signals Directorate is Australia's signals-intelligence, information-security, and offensive-cyber agency. It is responsible for foreign signals-intelligence collection in support of Australian national-security and economic interests; the design and accreditation of cryptographic and information-security systems for Australian government use; cyber-security defence of Australian government and critical-infrastructure networks through the Australian Cyber Security Centre (ACSC); and authorised offensive cyber operations against foreign cyber-threat actors.1

The agency operates under the authority of the Minister for Defence, is headquartered in Canberra, and is led by a Director-General appointed by the Governor-General. It is one of the original signatories of the UKUSA / Five Eyes signals-intelligence partnership and operates joint facilities — most notably the Joint Defence Facility at Pine Gap, Northern Territory — with the United States.2

History & Origins

ASD's lineage traces to the wartime Central Bureau in Brisbane, established in 1942 to coordinate Australian, US, and British signals-intelligence operations against Japanese forces in the South-West Pacific Area. Post-war reorganisation produced the Defence Signals Bureau in 1947, renamed the Defence Signals Branch and subsequently the Defence Signals Division. The agency was established in its modern form as the Defence Signals Directorate (DSD) in 1978, renamed the Australian Signals Directorate in 2013, and granted statutory independence as a non-corporate Commonwealth entity within the Defence portfolio by the Intelligence Services Amendment Act 2018.3

The agency's existence was not formally avowed by the Australian Government until the Hope Royal Commission's 1977 reports recommended public recognition. The Intelligence Services Act 2001 placed ASD on a formal statutory footing in conjunction with ASIS and the Defence Imagery and Geospatial Organisation; the 2018 reorganisation made ASD the largest of the Australian intelligence services by personnel.4

The 2016 establishment of the Australian Cyber Security Centre as an ASD-led hub for cyber-security work, and the 2017 merger of the ACSC's functions into ASD, produced the most substantial restructuring of Australian cyber arrangements since 2001.5

Mandate & Jurisdiction

ASD's authorities are specified in the Intelligence Services Act 2001 and the Australian Signals Directorate Act provisions of the Intelligence Services Amendment Act 2018. Its statutory functions are:

  • to obtain intelligence about the capabilities, intentions, or activities of people or organisations outside Australia;
  • to communicate, in accordance with the Government's requirements, such intelligence;
  • to provide material, advice, and other assistance to Commonwealth and State authorities on matters relating to the security and integrity of information;
  • to provide assistance to Commonwealth and State authorities, and to other authorised persons, in relation to cryptography, communications security, and information-security technologies;
  • to undertake activities to prevent and disrupt, by electronic or similar means, cyber-enabled crime where authorised;
  • to undertake authorised offensive cyber operations.6

Section 7 of the Intelligence Services Act applies to ASD: the agency must not produce intelligence on Australian persons except under specific authorisations, and must not undertake activities for the purpose of furthering the interests of any political party in Australia. Cyber-security defence work for Australian critical infrastructure operates under the additional framework of the Security of Critical Infrastructure Act 2018 (as amended).

Notable Operations

Confirmed UKUSA / Five Eyes signals partnership (1947–present). Australia is one of the founding members of the UKUSA Agreement signals partnership, alongside the United States, the United Kingdom, Canada, and New Zealand. The partnership and successor agreements were declassified in 2010 and remain the foundational architecture of Western signals-intelligence cooperation.7

Confirmed Pine Gap (1970–present). The Joint Defence Facility Pine Gap, near Alice Springs in the Northern Territory, is a joint US–Australian signals-intelligence and satellite-control facility. Its existence has been formally acknowledged since 1970; the basic outlines of its function — control of US signals-intelligence satellites and processing of collected signals — have been progressively declassified through US and Australian sources. The facility has been the subject of sustained protest and academic study.8

Confirmed Snowden-disclosed programmes (2013). The 2013 disclosures included a body of documents detailing ASD operations and Five Eyes signals-intelligence sharing arrangements. Specific disclosed programmes included the targeting of the personal mobile phone of then-Indonesian President Susilo Bambang Yudhoyono, his wife, and senior Indonesian officials in 2009 — a disclosure that produced a substantial Australia–Indonesia diplomatic crisis in 2013–2014.9

Confirmed Offensive cyber operations against ISIS (2016–onward). In 2016 Prime Minister Malcolm Turnbull publicly acknowledged that ASD was conducting offensive cyber operations against the Islamic State group, the first such public acknowledgment by an Australian government. The operations were described in subsequent ASD and ACSC reports.10

Confirmed REDSPICE programme (2022–present). The Resilience – Effects – Defence – SPace – Intelligence – Cyber – Enablers (REDSPICE) programme, announced in the 2022–23 budget, represents the largest single expansion of ASD in its history — A$9.9 billion over a decade — aimed at expanding signals-intelligence collection, cyber-defence, and offensive-cyber capabilities.11

Controversies & Abuses

Confirmed Targeting of the Indonesian President (2009). The disclosure that ASD, in cooperation with the United States NSA, had targeted the personal mobile communications of then-President Susilo Bambang Yudhoyono and his wife produced a substantial Australia–Indonesia diplomatic crisis in November 2013. President Yudhoyono recalled the Indonesian Ambassador to Australia and suspended bilateral cooperation on counter-people-smuggling and military matters. The Australian Government did not formally apologise but ultimately negotiated a Joint Understanding restoring cooperation in 2014.9

Confirmed East Timor maritime negotiations (2004). ASD personnel supported the ASIS operation that planted covert listening devices in the offices of the Government of Timor-Leste during the 2004 negotiation of a maritime boundary and oil-and-gas treaty. The operation was disclosed by a former ASIS officer ("Witness K"); the subsequent prosecution of Witness K and his lawyer Bernard Collaery was extensively criticised on transparency grounds.12

Alleged Trade-related signals collection. Successive disclosures and academic studies have identified instances of Five Eyes signals collection on commercial and trade matters, including the 2013 Snowden-derived reports on collection during US–Australia–Japan trade discussions. Australian Government policy is that ASD does not collect signals intelligence for the commercial advantage of Australian companies.13

Notable Figures

  • Stan Clark — Director, Defence Signals Directorate, late 1970s. Period of formal avowal.
  • Stephen Merchant — Director, 2008–2013. Subsequently co-author of the 2017 Independent Intelligence Review.
  • Paul Taloni — Director, 2013–2017. ASD renaming and Snowden-disclosure period.
  • Mike Burgess — Director-General, 2017–2019. Subsequently Director-General of Security (ASIO).
  • Rachel Noble — Director-General, 2020–2024. First woman to lead ASD; oversaw the launch of REDSPICE.
  • Abigail Bradshaw — Director-General, 2024–present.

Oversight & Accountability

ASD is subject to oversight by the Minister for Defence as the responsible minister; the Inspector-General of Intelligence and Security; the Parliamentary Joint Committee on Intelligence and Security; the Independent National Security Legislation Monitor; the Office of the Australian Information Commissioner for personal-data matters; and, for cyber-security functions, the Cyber Security Strategy and successive sectoral regulators.

The Inspector-General of Intelligence and Security publishes regular reviews of ASD activities, including specific reviews of compliance with privacy-related ministerial authorisations under the Intelligence Services Act.14

Sources & Further Reading

  1. Intelligence Services Act 2001 (Cth); ASD, "About ASD," asd.gov.au; Australian Cyber Security Centre, "About," cyber.gov.au.
  2. Office of National Intelligence, "The National Intelligence Community," oni.gov.au.
  3. Desmond Ball and David Horner, Breaking the Codes: Australia's KGB Network, 1944–1950 (Allen & Unwin, 1998); Desmond Ball, Pine Gap (Allen & Unwin, 1988).
  4. Justice Robert Hope, Royal Commission on Intelligence and Security: Report, 1977; Intelligence Services Act 2001 (Cth); Intelligence Services Amendment Act 2018 (Cth).
  5. Department of the Prime Minister and Cabinet, Australia's Cyber Security Strategy, 2016; ASD, Australian Cyber Security Centre Reorganisation announcement, 2017.
  6. Intelligence Services Act 2001, sections 7, 7A.
  7. National Archives of Australia and US National Archives, joint declassified release of UKUSA Agreement documents, 2010.
  8. Desmond Ball, Pine Gap (Allen & Unwin, 1988); Richard Tanter and Bill Robinson, "What is Pine Gap For?", Nautilus Institute Briefing Book, 2017.
  9. Ewen MacAskill et al., "Australia spied on Indonesian president, leaked Edward Snowden documents reveal," Guardian, 18 November 2013; Joint Understanding of a Code of Conduct between the Republic of Indonesia and Australia, August 2014.
  10. Prime Minister Malcolm Turnbull, statement on offensive cyber operations against ISIS, 23 November 2016; ACSC, Threat Reports, successive editions.
  11. Australian Government, Budget 2022–23, REDSPICE announcement; ASD, "REDSPICE Blueprint," 2022.
  12. Inspector-General of Intelligence and Security, Annual Reports, 2014–2022; Statement of Attorney-General Mark Dreyfus, 7 July 2022 (Collaery).
  13. James Glenday and Anne Davies, "Documents reveal Australia spied on Japan during trade talks," ABC News, 24 February 2014; ASD policy statements on commercial signals intelligence.
  14. Inspector-General of Intelligence and Security, Annual Reports and ASD-specific reviews.