chinese-war.com

A 2027 U.S.–China conflict with Australia aligned to the U.S. China trade stops immediately, Taiwan exports are slowed/limited, and China launches large-scale cyber disruption in waves. This is a planning scenario, not a forecast. Planning scenario, not a forecast. No end date is set.

Security Services — Australia (Investor-Grade, Downstream Focus)

Read the United States briefingReport date 2026-11-07

What happens

Why Australian security services gets hit in this scenario

  1. A China trade stop removes 40,396.35 thousand USD from an alarm-apparatus import total of 85,426.10 thousand USD. The calculated China share of 47.3 percent is the hit on this line. The next named partner is the United Kingdom at 8,197.51 thousand USD.

    wits.worldbank.org

  2. The low-exposure proof is a failed camera query plus an opened heading with no row named Taiwan. No WITS partner on HS 853110 is named Taiwan. A refetched HS 852589 query returned a WITS error page and supplied no figure. The residual label Other Asia, nes is not Taiwan and is not used as a figure.

    wits.worldbank.orgwits.worldbank.org

  3. Guarding labour does not stop with the ship. Occupation employment was 66,800 and the overview prints median weekly earnings of 1,818 dollars. NSW master subclasses still authorise operatives from one person to unlimited.

    jobsandskills.gov.auservice.nsw.gov.au

  4. Monitoring is a 24-hour desk. IMG says it operates 24 hours a day, 365 days a year. A platform failure stops wholesale monitoring for more than 800 independents. No day-count of an IMG outage was printed.

    cdn-api.markitdigital.com

  5. Cyber on customers is the demand case. ACSC recorded an 11 percent increase from last year in incidents it responded to, and it tells critical-infrastructure operators to isolate vital OT and enabling systems for 3 months. Those costs and that duration are not IMG's accounts.

    cyber.gov.aucyber.gov.au

  6. State licensing continues. A master licence is required to employ or subcontract security activities. The subclass caps still limit how many licensed persons a firm may provide on a day.

    service.nsw.gov.au

How hard, how soon

0–3 months

  • Short-horizon labor price: the overview prints median weekly earnings of 1,818 dollars. This is a weekly level. It is not a year-over-year peak.

    jobsandskills.gov.au

  • Short-horizon duration guidance, labeled as customer planning and not as a measured outage: isolate vital OT and enabling systems for 3 months.

    cyber.gov.au

  • Short-horizon contract term, not a measured outage: invoices are usually payable within 30 days for ongoing alarm monitoring or static guarding. The annual report is for the year ended 30 June 2026.

    cdn-api.markitdigital.com

1–6 months

  • Demand-cost band for the customer's small firm: small business cost was up 14 percent, to 56,600 dollars. The security firm does not record that dollar as its own expense.

    cyber.gov.au

12+ months

  • Long demand-cost band: large business cost was up 219 percent, to 202,700 dollars. The licence-growth path beside it is 6.10 percent to 167,530 individual licences, which is headcount supply, not a cyber loss.

    cyber.gov.auasial.com.au

Wave 1

Wave 1 direct is the wholesale monitoring centre, the remote-video and customer alarm path, and the China-led alarm device. Wave 1 indirect is the ACT monitoring-centre operator who cannot run an offline console. ACSC's 3-month isolation step is customer guidance. The wave order is a planning model.

cdn-api.markitdigital.comwits.worldbank.orgasial.com.aucyber.gov.au

Wave 2

Wave 2 indirect is the Victorian installer and the customer's cybercrime demand. Small business cost was up 14 percent. There were an 11 percent increase from last year in incidents ACSC responded to. The security firm is downstream of the customer's incident. This order is a planning model.

asial.com.aucyber.gov.au

Wave 3

Wave 3 indirect is licensed guarding and the occupation, which continue. Occupation employment was 66,800. Wave 3 direct is the MA self-employed licensee, 1,525 licences, whose single login is a later target. This order is a planning model.

jobsandskills.gov.auasial.com.auservice.nsw.gov.au

Country exposure

origin sharepercent

Cost and price shock by time bucket

price changepercent

au weekly earningsdollars

Downstream scale

workforcepeople

sitescount

Operating prints

daysdays

monthsmonths

ratespercent

What to do

Day 7

  • Confirm the monitoring desk and the video path. IMG operates 24 hours a day, 365 days a year, for more than 800 independents. Customer CI guidance is to isolate vital OT and enabling systems for 3 months. That guidance is the customer's plan, not a measured outage at IMG.

    cdn-api.markitdigital.comcyber.gov.au

  • Keep the guard roster. Occupation employment was 66,800. Do not stand down MA, MB, MC, MD, or ME licensees because an import stopped.

    jobsandskills.gov.auasial.com.au

Day 30

  • Split alarm-apparatus orders. The calculated China share of 47.3 percent is the China row. Do not rename Other Asia, nes as Taiwan. Check Hikvision and Dahua units against the CISA catalog.

    wits.worldbank.orgcisa.gov

  • Treat new customer calls after a cyber incident as demand. Small business cost was up 14 percent. Do not book 56,600 dollars as the security firm's loss.

    cyber.gov.au

Day 90

  • Re-check state caps before adding headcount. MC is up to 14 and MD is up to 49. ME is unlimited and there are 220 of those licences. Public liability of at least 10,000,000 dollars applies if firearms, horses, or dogs are used.

    service.nsw.gov.auasial.com.au

  • Watch Queensland licences against the planning line of 24,983. The page shows a fall of 330, or 1.3 percent, to that level. National individual licences grew 6.10 percent to 167,530.

    asial.com.au

What to watch

By role

Monitoring-center operators

  • Confirm the A1/R1A desk can still take the more than 800 independents.

  • Treat the 3-month isolation step as the customer's CI plan.

  • Keep ACT's 2,687 monitoring-centre operator licences in the staffing pool.

cdn-api.markitdigital.comcyber.gov.auasial.com.au

Electronic-security integrators

  • Split purchases off the calculated China share of 47.3 percent.

  • Use Victoria's 1,458 installer registrations as the electronic book, not the 40,942 guard licences.

  • Check Hikvision and Dahua firmware against the CISA catalog.

wits.worldbank.orgasial.com.aucisa.gov

Weekly checks

What is not known

Working papers: node summary
NodePrimary impactTime horizonCyber waveEvidence
Wholesale monitoring centresIndependent installers lose the wholesale monitoring desk if the graded centres stop.0-3 monthsWave 1 (direct)See node sources
Remote video and customer alarm appsLive video guarding and the customer video path stop when the platform stops.0-3 monthsWave 1 (direct)See node sources
China-led alarm-apparatus importsA China trade stop removes the largest partner on the alarm-apparatus import line.0-3 monthsWave 1 (direct)See node sources
ACT monitoring-centre operatorsLicensed monitoring-centre operators cannot run a console that is offline.0-3 monthsWave 1 (indirect)See node sources
Victoria security-equipment installersThe installer registration book is separate from the guard licence and is the electronic-security workforce.1-6 monthsWave 2 (indirect)See node sources
NSW master-licence guardingLicensed guarding firms keep employing operatives under state subclass caps.0-3 monthsWave 3 (indirect)See node sources
Security officer and guard employmentThe occupation keeps working, and it is a smaller count than the licence roll.0-3 monthsWave 3 (indirect)See node sources
Small master licenseesSelf-employed master licensees are the thin end of the NSW licence ladder.12+ monthsWave 3 (direct)See node sources
Customer cybercrime demandSelf-reported cybercrime costs are demand for guarding, alarms, and monitoring, not the security firm's own loss.1-6 monthsWave 2 (indirect)See node sources

Sources