Australia’s stress test

The terror attack at Bondi Beach on Sunday should be understood not only as an act of violence but as a stress test of Australia’s security, social and policy systems.

The immediate danger has passed. The more consequential question is what this event reveals about the community assumptions that have quietly taken hold—and what follows if those assumptions are left unchallenged.

For many Australians, the violence collided with a deeply held belief: that the terror years were behind us, that the period that had justified nearly 25 years of counterterrorism legislation, regulatory oversight, intelligence reform and expanded police powers had closed. While official threat assessments have consistently warned that violence remains probable, public sentiment has arguably drifted towards the view that these frameworks were relics of a different time.

Bondi Beach exposes the fragility of that belief.

Australia’s National Terrorism Threat Level did not change overnight. It remains at ‘Probable’. Over time, the absence of large-scale attacks has fostered an impression for some that the risk has dissipated rather than evolved. In that environment, counterterrorism laws increasingly came to be viewed for some not as risk-management tools, but as constraints—excessive, outdated or no longer proportionate.

That complacency is itself a strategic vulnerability.

Director-General of Security Mike Burgess’s 2025 threat assessment reinforced precisely this point. It reiterated that it would be a mistake to look at contemporary terrorism through a lens made when Islamic State or al-Qaeda had been at their height. You’d get the wrong picture, we were told. Now, attacks are most likely to manifest through small-scale, unpredictable acts by individuals or micro-networks, often accelerated—in days and weeks rather than months and years. Burgess warned that the face, form and motivations of terrorism were now more diverse and complicated.

This means the absence of mass-casualty attacks should not be mistaken for the absence of threat. Rather, the threat is changing—and should be expected to continue to do so.

As ASPI analysts have similarly argued, modern terrorism and violent extremism do not always conform neatly to past templates. Contemporary attacks are frequently carried out by lone actors motivated by grievance, fixation or notoriety, operating at the blurred edges of terrorism, extremism and criminal violence. They exploit openness, speed and visibility. They are difficult to detect and impossible to prevent entirely.

Australia’s legislative and regulatory frameworks were never designed to guarantee safety. They exist to manage risk, enable early intervention and limit the scale and frequency of harm. Judging their relevance solely by periods of apparent calm misunderstands both the nature of contemporary threat and the purpose of the systems built to contain it.

Bondi Beach reminds us why those systems remain so vital.

The operational response demonstrated their value. Police—state and federal—acted decisively. Paramedics and other emergency services responded with speed and coordination. There was no cascading failure, no secondary incident and no collapse in public order. These are the products of institutional learning accumulated across decades and incidents, learning that can be eroded if its relevance is forgotten.

But security frameworks don’t operate in isolation. The second and more complex contest begins after the incident.

In the hours following the terror attack, familiar dynamics unfolded. Social media accelerated speculation. Misinformation spread faster than verified facts. Some voices rushed to impose meaning, blame or ideological explanation before evidence was available. This has become a central feature of modern crises.

Violence today seeks more than physical harm. It aims to fracture trust, provoke overreaction and reignite divisions societies believe they’ve moved beyond. When people assume the terror years are over, they’re often unprepared for this second phase—the information and social contest that follows.

This is where restraint matters.

Calls to dismantle long-standing security frameworks in the name of normalisation misunderstand how risk behaves. The absence of attacks isn’t proof of the irrelevance of our arrangements; it’s often evidence of their quiet effectiveness. Conversely, responding to violence with panic, overreach or performative policy shifts risks validating the very narratives that attackers hope to provoke.

What comes next should therefore be consolidation, not reversal.

First, disciplined public communication as we’ve seen in the immediate aftermath of the Bondi attack remains central. Having state and federal authorities that continue to provide timely, factual updates without speculation fills an information vacuum that otherwise invites distortion that fuels fear. Clear communication is not a courtesy; it’s a security function.

Second, Australia needs to reaffirm the legitimacy of its counterterrorism and public-safety frameworks while remaining open to measured review. Oversight and proportionality matter. So does institutional memory. It’s a strategic error to dismantle or hollow out systems built over 25 years.

Third, there’s a civic responsibility that cannot be outsourced to government. Australians should continue to actively challenge hate, misinformation, and dehumanising language in all its forms—online and offline. Walking past this behaviour normalises it. Sharing it amplifies it. Democracies are weakened not only by violence, but by disengagement from the norms that contain it.

Finally, leadership matters. Political, media and community leaders should resist the temptation to frame Bondi as evidence that ‘everything has changed’ or that the system has somehow failed. Such narratives grant the attackers disproportionate strategic impact. The harder task is to acknowledge shock without surrendering perspective.

Australia has faced this challenge before. After previous attacks, it largely chose restraint over reaction and cohesion over division. That choice preserved social trust and strengthened long-term security.

Bondi should reinforce precisely that lesson. The terror years were never something Australia finished. They evolved. The frameworks built to manage that reality remain necessary—not because fear demands them, but because resilience depends on them.

What comes next is not inevitable. It’s a choice, about discipline, memory and whether we allow violence to dictate the terms of our national response.

This article was written by John Coyne and James Corera and published by The Strategist.