Two years after a cyber attack compromised Victoria's road safety cameras a series of "urgent recommendations" to fix vulnerabilities still haven't been done.
Victorian hospitals also had to cancel a series of operations after a different cyber attack only a month ago.
About 160 speed and red-light cameras were targeted in the June 2017 WannaCry ransomware attack, but the minister wasn't told until it was reported in the media.
Former Road Safety Commissioner John Voyage, in his last annual report in the role, says the urgent improvements he recommended to protect Victoria's cameras are still waiting.
"Whilst some recommendations have been acted on, I have not seen the urgency attached to implementing the recommendations, especially the urgent recommendations, which I would have expected," he said in the report.
"After all, the integrity of the system has come under public scrutiny, the improvements are necessary for the public to have confidence.
"The public should rightly be able to assume that the recommendations were being prioritised and actioned as part of the investigation process, otherwise the authorities have missed the key point of the investigation."
The key improvements he listed included establishing a baseline of "service as usual", developing a disaster action plan and changing the culture within the department.
Mr Voyage said he understood budgetary considerations had been a factor.
"However, I am concerned there has been insufficient action taken with some recommendations," he said.
The 2017 attack reportedly caused a loss of $20 million in revenue, and about 70,000 fewer bookings.
Police Minister Lisa Neville in 2018 said there was a need for cultural change in the department after she wasn't told about the attack until it was made public.
The Justice Department has been contacted for comment.
The Road Safety Commissioner annual report was tabled in parliament on Thursday in a dump of 256 government documents.
The report also revealed upgraded digital cameras brought in more than $12 million in 2017-2018 compared to just $253,172 the year before.
Australian Associated Press