[SimplePeople]

I imagine that the government would begin at the executive level and ask "who else needs to know" and then work down the list to compel individuals or teams as required.

Similar processes already exist for other legal/police requests. If this legislation is used, companies like Telstra will have dedicated teams to comply with requests.

If your new Australian Citizen hire can build back doors into your software you've got bigger issues than hiring. Though I could see real risk associated with an Australian-based team for a global company or an Australian-based supplier.