SOCI (Security of Critical Infrastructure)

Federal regime for cyber + physical resilience of critical infrastructure.

The Security of Critical Infrastructure Act 2018 captures 11 sectors. Captured entities must register, adopt a CIRMP, conduct annual board-approved CIRMP reviews, and notify ASD of significant cyber incidents within 12 hours (other reportable: 72 hours).