There should already be a huge incentive for companies to have...

There should already be a huge incentive for companies to have high levels of cyber security without the governement adding in new penalties

the financial cost to Optus due to customer retention / image will far exceed any adequate cyber subsctiption they would have / could have purchased.

They will almost certainly lose tens of millions in revenue and a class action has been launched, legal fees not to mention the staff costs that are being focused on dealing with the aftermath of this

IMO companies who "take a risk" in the future all will be met with the same fate with the amount of cyber criminals out there

all IMO