Keeping Australia’s national-security community fit to avoid strategic surprises

Strategic surprise rarely occurs because there is no warning. Signals accumulate, intelligence reporting circulates and analysts identify emerging risks. Strategic surprise occurs when institutions cannot quickly integrate those signals to act on them.

In a new ASPI reportStrategic surprise in the 21st century: Complexity, systems failure, and the rewiring of national security, we argue that Australia must shift its focus from predicting every contingency to building what we call strategic fitness: the institutional capacity to integrate information across domains, decide at tempo and recover rapidly under pressure.

Contemporary strategic environments behave differently from those that shaped many national-security governance models. Economic networks, digital infrastructure, supply chains and political systems now operate in dense interaction. Strategic pressure rarely emerges from a single threat vector. Strategic effect increasingly emerges from multiple stressors interacting across domains.

Historical experience demonstrates the pattern. The 9/11 attacks occurred despite the presence of relevant intelligence signals distributed across agencies. Analysts identified elements of the threat, yet institutions struggled to synthesise that information in time. Similar dynamics appeared in the rise of Islamic State, the 7 October 2023 attacks in Israel and China’s economic coercion against Australia. Information existed, but integration lagged.

Strategic surprise, therefore, reflects structural conditions rather than isolated intelligence failures. The interaction between political, economic, technological and security systems has intensified. Decision cycles have accelerated. Risks now emerge concurrently, and disruption often cascades across sectors once pressure accumulates.

Three dynamics shape that environment.

Risk is continuous because strategic competition persists rather than appearing episodically. Governments face constant pressure across economic, technological and security domains.

Risk is concurrent because multiple stressors materialise simultaneously. Cyber operations, economic measures, regulatory action and information campaigns unfold in parallel. Institutions structured along portfolio lines struggle to maintain coherence when multiple pressures occur simultaneously.

Risk is cascading because disruption spreads through interconnected systems. Pressure in one sector often triggers instability in others as shocks propagate through tightly coupled networks.

Volume, velocity and variety intensify those pressures. Decision-makers confront unprecedented quantities of information. Events unfold faster than many institutional processes. Adversaries employ an expanding range of tools across economic, technological and political domains.

Traditional risk-management frameworks struggle under these conditions. Many governance systems still rely on ranking discrete threats and allocating resources accordingly. Prioritisation remains necessary in systems with finite resources. But prioritisation alone cannot capture how moderate stressors interact and accumulate into systemic crises.

Strategic effectiveness, therefore, depends less on predictive precision and more on adaptation. Strategic fitness becomes the relevant performance standard.

Strategic fitness means three things: integrating information across domains, making decisions at speed and recovering quickly under pressure. Surprise cannot be eliminated in complex environments. Institutions must prevent disruption from cascading into strategic defeat.

Horizontal integration forms the first pillar of strategic fitness. Contemporary strategic competition exploits seams between portfolios. Economic coercion interacts with information operations. Cyber disruption intersects with infrastructure vulnerabilities. Governments require mechanisms that continuously synthesise risks across economic, technological and security domains.

Authority aligned with tempo forms the second pillar. Decision cycles designed for slower environments create vulnerability when events accelerate. Clear delegation of authority and rehearsed escalation pathways allow decisions to be made while information remains fresh.

Recovery capacity forms the third pillar. Resilience now contributes directly to deterrence. Adversaries gain little advantage from coercive pressure if targeted states can absorb disruption and restore functionality quickly. Recovery design, therefore, becomes a core element of national deterrence.

Australia enters this environment with significant strengths. Its national-security architecture remains mature and legislatively grounded. The Office of the Director of National Intelligence coordinates the National Intelligence Community under the Office of National Intelligence Act. Critical infrastructure resilience frameworks have expanded through the Security of Critical Infrastructure Act. Strategic documents, including the Defence Strategic Review and the National Defence Strategy, recognise the convergence of defence posture, economic security and national resilience.

Institutional friction, rather than institutional absence, now represents the core challenge. Portfolio-based governance structures can create integration lag when pressure builds simultaneously across domains. Coordination often occurs reactively rather than through permanent cross-domain mechanisms.

Our report proposes pragmatic reforms that strengthen existing institutions while reducing integration lag. A systemic risk synthesis capability within the National Intelligence Community would map cross-domain interaction risks and identify cascade pathways. National exercises should test how institutions respond to concurrent multidomain stress rather than single-event crises. Federated data architectures allow analysts to integrate information across agencies more rapidly. Performance frameworks for senior officials should measure integration and recovery capability alongside traditional portfolio outcomes. The government should also produce an annual strategic fitness assessment that measures integration speed, decision tempo and recovery performance across portfolios.

None of those reforms requires radical institutional redesign. Australia already possesses the legal authorities and organisational foundations required to adapt. The challenge lies in aligning those institutions with the tempo and complexity of contemporary strategic competition.

Strategic surprise will remain a feature of the modern strategic environment. Advantage will belong to states whose institutions can absorb pressure, integrate signals quickly and sustain coherent responses under stress.