While cyber-security firms in Melbourne and Brisbane have scale, there is a cluster of providers in Canberra, which have specialised cyber-security knowledge combined with an understanding of government policy development, giving them an advantage.