Your management team tells you the technology strategy is on track. The ACS Digital Pulse says the Australian digital economy is under structural pressure. One of those two positions deserves more scrutiny than it is probably getting at your board table.
Does this apply to you?
ASX-listed: Digital capability and cyber risk are material to investor disclosure obligations and to board oversight duties under the Corporations Act. [1] The Digital Pulse benchmarks give you an external reference point for assessing whether management claims hold up.
APRA-regulated: Technology and cyber workforce constraints identified in the Digital Pulse directly affect your capacity to meet prudential obligations around operational resilience and risk management. [2]
NFP / SME: Workforce shortages and AI adoption pressures described in the Digital Pulse apply to organisations of every size. Smaller entities often carry more concentrated risk because there is less redundancy in the team.
What the Digital Pulse actually is
The ACS Digital Pulse is the authoritative annual assessment of Australia's digital economy, produced by the professional body for Australia's technology and cyber workforce. [3] It measures the size and shape of the technology workforce, digital skills supply and demand, sector investment levels, and Australia's position relative to comparable economies.
Directors should treat it as an independent external benchmark, not as an IT industry document. When the report identifies a gap between the skills the economy needs and the skills it has, that gap lands directly on your organisation's risk register. Talent shortages do not stay in the labour market. They become operational risk, delivery risk, and cyber risk inside your organisation.
The workforce risk directors are underestimating
The Digital Pulse consistently identifies a structural shortfall in Australia's technology and cyber workforce. [4] Demand for digital skills is outpacing supply across almost every sector. The pipeline of new talent entering the workforce is not closing that gap at the pace required.
For directors, this has three practical consequences. First, your organisation is competing for a constrained pool of people to build, run, and defend your technology environment. Second, when a critical role turns over, the replacement timeline is longer and more expensive than historical benchmarks suggest. Third, the people you retain are carrying higher workloads, which increases error rates and fatigue-related security failures.
This is not a human resources observation. It is a risk management observation. If your board is not receiving workforce pipeline reporting alongside cyber and technology risk reporting, you have a visibility gap.
AI adoption: the governance gap the Digital Pulse exposes
Each edition of the Digital Pulse tracks AI adoption and investment across the Australian economy. The pattern it reveals is consistent: adoption is accelerating, but governance is not keeping pace.
Organisations are deploying AI tools, automating decisions, and integrating third-party AI services faster than they are building the oversight frameworks to manage those systems. At the board level, this translates directly into accountability risk. Directors have a duty of care under the Corporations Act to act with reasonable diligence. [5] Approving or permitting AI deployment without a governance framework in place is not a defensible position, regardless of whether an incident has occurred yet.
The ACS, as the professional body for Australia's technology practitioners, has consistently called for ethical, accountable AI governance. The Digital Pulse gives that call an economic context. AI investment is rising. The boards overseeing that investment need to be asking harder questions about what controls exist, not just what the returns are expected to be.
Australia's global position and what it means for your sector
The Digital Pulse benchmarks Australia against other developed economies on digital readiness, investment, and workforce capability. Australia performs well in some areas and poorly in others. The gaps the report identifies are not abstract national statistics. They map directly onto the competitive conditions your organisation operates in.
Where Australia lags on digital infrastructure or skills investment, organisations in those sectors face higher costs to achieve the same technology outcomes as peers in better-positioned economies. Where Australia is advancing, there is a genuine competitive window that boards should be pressing management to exploit.
Directors do not need to become technologists to use this information. They need to ask whether management has read it, whether the findings are reflected in the technology strategy, and whether the board is seeing an honest assessment of how the organisation sits relative to the national and international picture the Digital Pulse describes.
What directors should actually do
The Digital Pulse is published annually. It should be a standing item on the board's governance calendar, reviewed and discussed at the board or risk committee level each year. Not delegated to management. Not treated as background reading. Reviewed, with implications drawn out and recorded.
Governance red flags
- The board has never discussed the ACS Digital Pulse or an equivalent external benchmark for digital capability and workforce risk.
- Technology workforce risk, including retention and succession for critical roles, does not appear on the risk register in any form.
- AI tools are being adopted across the organisation but no AI governance framework has been presented to or approved by the board.
- Management's technology strategy does not reference external benchmarks, only internal milestones and vendor projections.
- The board has no visibility over how Australia's digital skills shortage is affecting the organisation's ability to fill technology and cyber roles.
Questions to ask management
- Has the executive team reviewed this year's ACS Digital Pulse, and what specific findings have been mapped to our technology and workforce strategy?
- How many critical technology and cyber roles are currently vacant or at retention risk, and what is the average time to fill those roles against current market conditions?
- What AI tools or automated decision systems are currently in use or in deployment across the organisation, and what governance controls apply to each?
- How does our digital capability benchmark against the national picture described in the Digital Pulse, and where are we materially behind?
- Is the board receiving sufficient reporting to assess technology and cyber workforce risk as a standalone risk category, separate from general IT operations?
The Digital Pulse does not make comfortable reading for directors who have been accepting reassurance from management without independent verification. Australia's digital economy has real structural pressures, and those pressures are sitting inside your organisation right now. The question is whether your board can see them clearly enough to govern them.
Suitable for board minutes or a risk register entry
Frequently Asked Questions
Is the Digital Pulse relevant to my organisation if we are not a technology company?
Every organisation depends on technology and on the people who build and run it. The Digital Pulse documents the conditions of the market those people come from. Workforce shortages, skills gaps, and AI adoption pressures affect every sector, not only organisations that sell technology products or services.
How do I use the Digital Pulse at the board level without getting lost in the detail?
Focus on three things: the workforce supply and demand picture and what it means for your organisation's critical roles, the AI adoption and governance findings and whether your organisation's oversight framework is adequate, and the benchmark data that lets you assess whether management's technology strategy is realistic given market conditions. You do not need to read every section to extract governance-relevant insight.
Does the ACS Digital Pulse carry regulatory weight?
The ACS is the professional body for Australian technology practitioners, not a statutory regulator. The Digital Pulse is authoritative industry intelligence, not a compliance instrument. Its governance value is as an independent external benchmark that directors can use to test management's claims and identify blind spots in the board's technology risk picture.
How often should the board formally consider the Digital Pulse findings?
Annually, aligned to each new publication. The findings should be tabled formally, discussed at the board or risk committee level, and the implications for the organisation's technology strategy and risk register should be documented. A standing agenda item is a simple and defensible way to demonstrate active board oversight of technology risk.
If this resonates, I would welcome a conversation about the Founder Advisory Session, or get in touch directly.
Briefing by
Andrew Roberts
Founder and Principal Advisor at Andrew Roberts Advisory. I help Australian boards translate cyber and AI governance obligations into clear, defensible oversight. Former ASX-listed Group CEO, AICD and ACS member, ACS MACS (Snr) CP (Cyber).