Cybercrime is becoming a material business risk for auction houses, and AVAA Certified Auctioneers (CAAu) and AVAA Corporate Members are responding with greater awareness, stronger safeguards and a clear commitment to protecting clients. Their proactive approach is helping to make cyber resilience an important feature of contemporary professional auction practice.

Auction businesses increasingly rely on online platforms, cloud systems, electronic payments and digital records. These technologies create significant benefits for bidders, vendors and businesses, including broader market access, faster transactions and more efficient communication. Managing the associated cyber risks allows these benefits to be delivered securely and confidently.

Auction businesses may hold personal information, bidder details, vendor records, payment instructions, bank account information and commercially sensitive data. They also manage transactions in which timing, accuracy and trust are critical. Both AVAA Certified Auctioneers (CAAu) and AVAA Corporate Members recognise that protecting this information is part of providing a professional and reliable service.

Business email compromise is one risk receiving particular attention. A criminal who gains access to, or convincingly imitates, an email account may attempt to substitute payment instructions shortly before settlement with a vendor. Professional auction businesses are increasingly countering this threat by independently verifying sensitive requests through established contact details.

The industry benchmark is AVAA Professional Standard 13, Cyber Security & Technology Risk, which provides a practical framework for managing these issues. Applying to AVAA Certified Auctioneers (CAAu) and AVAA Corporate Members, it calls for reasonable steps to identify, assess and reduce technology-related risks. Its proportionate approach recognises differences in business size, complexity, information and technology.

The Auction Industry’s Cyber Security Management Standard —

Developed by auctioneers themselves, AVAA Professional Standard 13 – Cyber security and technology risk establishes practical expectations for cyber security, information protection and technology risk across auction and valuation services. It covers access controls, digital communications, cloud systems, third-party providers, backups, incident planning and breach management.  It requires AVAA Certified Auctioneers (CAAu) and AVAA Corporate Members to take reasonable, proportionate steps to protect information, maintain operations, verify sensitive instructions and appropriately notify AVAA of significant incidents promptly.

This standard addresses client data, passwords, authentication, remote access, cloud services, online platforms, third-party providers, secure disposal, backups, recovery procedures and incident response. It encourages businesses to embed cyber security within governance, continuity planning and everyday professional practice.

This work is already reflected in the practical measures adopted across the sector. These include stronger passwords, multifactor authentication, secure backups, software updates, restricted system access and staff training. Many businesses are also reviewing access when employees change roles, checking the practices of technology suppliers and developing procedures for responding to suspicious activity.

These actions strengthen the entire auction relationship. Vendors gain confidence that their information and payment arrangements are being carefully managed. Bidders benefit from secure platforms and communications. Employees have clearer processes for raising concerns, while businesses are better prepared to maintain services if disruption occurs.

Of note is that AVAA Professional Standard 13 also establishes an accountable approach to significant incidents. Where a cyber security incident could adversely affect consumers, professional services, regulatory compliance or public confidence, members must notify AVAA as soon as reasonably practicable. This supports sector-wide awareness and continuous improvement. Notification is an administrative safeguard and does not itself represent a finding of wrongdoing.

Practical education further supports this leadership. Through the Cyber Wardens initiative, AVAA members and the broader auction and valuation sectors can access free training focused on achievable everyday actions. It helps businesses nominate people who can promote safe habits, assist colleagues and coordinate preparedness.

Training In Cyber Security Risk Management —

The Cyber Wardens program is a free, practical cyber security training for AVAA members and the broader auction and valuation sectors. The program helps a nominated team member promote safe habits, model preventative actions, answer colleagues’ concerns, coordinate supplier support and conduct cyber drills. It demystifies online security through clear, useful steps that help businesses prevent, prepare for, respond to and recover from cyber attacks and data theft.

Cyber threats will continue to evolve, and so will the sector’s response. Through professional standards, staff capability, secure systems and disciplined verification practices, CAAu credential holders and AVAA Corporate Members are demonstrating that cyber security is part of professional auctioneering. Their work is protecting businesses and clients while strengthening confidence in Australia’s auction sector.

For clients, choosing an AVAA Certified Auctioneer (CAAu) or an AVAA Corporate Member provides meaningful assurance that cyber security and technology risk are being treated as professional responsibilities. These practitioners operate within AVAA’s standards framework, which establishes clear expectations for protecting information, verifying sensitive instructions, maintaining business continuity and responding appropriately to significant incidents.

When appointing an auctioneer, clients should look for the respected CAAu credential or confirm that the business is an AVAA Corporate Member. This provides confidence that the auctioneer is committed to professional accountability, responsible technology practices and the protection of client interests. In an increasingly digital marketplace, that commitment is an important part of choosing a trusted auction professional.

.

.

Interested In Finding Out More?

If you’d like more information on the AVAA Professional Standards, send an email to standards@avaa.com.au or telephone 1300 928 165.  You can also stay up to date by following AVAA on LinkedIn, X/Twitter and Facebook.
.