SOCI Act Compliance
Summary: Australia's Security of Critical Infrastructure Act 2018 covers 11 sectors including energy, water, transport, healthcare, finance, and defense, and its 2024 amendments expanded scope to data storage systems holding business-critical data, broadened government powers to non-cyber incidents, added regulatory oversight of risk management programs, and consolidated telecommunications security requirements. Systems of National Significance face Enhanced Cyber Security Obligations including mandatory incident response plans, cyber security exercises, vulnerability assessments, and system information provision requirements.
What's compelling: Assets designated Systems of National Significance now carry mandatory incident response plans, exercises, and vulnerability assessments - obligations that assume your OT environment is mapped and your IT/OT segregation can be demonstrated, not just asserted.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026