The Victorian government's computer networks have inadequate security provisions and are vulnerable to cyber attacks.
Auditor-General John Doyle says more than 100 lapses and breaches in the government's IT systems were identified during recent audits.
In a report tabled in parliament on Wednesday, Mr Doyle warned that there was no central oversight of the public sector's ability to resist cyber attacks.
"There are no cohesive arrangements in place in Victoria to brief ministers if a major cyber threat was to affect the public sector's ability to continue to deliver services," he said.
Mr Doyle said he had written to the relevant agencies and asked them to urgently rectify the problems.
News that makes sense
Your trusted source for staying up-to-date with the world around you. Get free daily news updates and analysis, straight to your inbox.
He said the government's plan for a state crisis and resilience council to identify security threats and create clearer lines of accountability was a positive step.

