Protecting Komatsu Australia.
The Information Security function for Komatsu Australia. We protect the systems, data, and people that make Komatsu work — and provide the policies, tools, and support that let the business operate confidently.
Six functions. One mission: keep Komatsu safe.
Information Security at Komatsu Australia spans operations, governance, identity, and people. Most employees interact with us through the awareness program and the incident reporting channel — both essential to how we work.
Security Operations
24/7 monitoring of Komatsu Australia's endpoint, network, and cloud telemetry. Sydney-based SOC.
Identity & Access
MFA, conditional access, privileged identity management for all Komatsu accounts.
Vulnerability Management
Continuous scanning and prioritised remediation across endpoints, servers, and cloud.
Awareness & Training
Phishing simulations and role-based training so everyone can recognise threats.
Governance & Risk
Information security policy, third-party risk, advisory work, and audit support.
Incident Response
Investigation, containment, recovery, and post-incident review for confirmed incidents.
Tell us. Always.
The most important thing any Komatsu employee can do for our security posture is to report anything suspicious — even if you're not sure.
Reports are treated confidentially. There is no consequence to you for raising a concern that turns out to be benign.
The other 88% were still worth a look.
Suspicious email
Use the Report Phishing button in Outlook (built-in to Microsoft 365), or forward the message as an attachment to cybersecurity@komatsu-security.com.
Suspicious call or text
Don't engage. End the call. Note the number and any details. Email cybersecurity@komatsu-security.com or call us on the line below.
Account compromise
Call +61 2 9097 4700 immediately — don't use email if your account may be compromised. We'll start containment within minutes.
What we're seeing right now.
Recent security bulletins published to Komatsu Australia. Older advisories are available through the SharePoint security site.
Phishing campaign impersonating ATO
Several Komatsu Australia mailboxes have received emails claiming to be from the ATO about a 2025 tax return refund. Do not click links. Forward to the Security team and delete.
MFA registration deadline extended
Staff who have not yet completed multi-factor authentication enrolment now have until 31 May to do so. After that date, sign-in to Komatsu systems will be blocked until enrolment is complete.
VPN client update available
A new version of the Komatsu remote access client is being progressively rolled out via Intune. If prompted to restart, please save your work and accept the update.
Mining sector targeted by ransomware group
A known ransomware actor has been observed targeting AU mining sector organisations through compromised remote access tooling. Komatsu Australia is not currently impacted; the Security team is monitoring.