AUSTRALIA HUBCritical Infra

Home Affairs / CISC

Cyber & Infrastructure Security Centre

SOCI Act · 11 sectors · RMP rules

Who it applies to

Eleven critical infrastructure sectors from energy and water to data storage and financial markets.

Key instruments

  • 01Register of Critical Infrastructure Assets
  • 02Mandatory cyber incident reporting — 12h critical / 72h other
  • 03Critical Infrastructure Risk Management Program (CIRMP)
  • 04Enhanced cyber obligations for Systems of National Significance

Compliance calendar

  • CIRMP annual board report — 28 Sep each year
  • Incident reports — 12 or 72 hours

Penalty framework

Civil penalties, government assistance (step-in) powers for serious incidents.

Need the full control catalogue?

Templates, applicability matrices and board-paper skeletons for Home Affairs / CISC.

Talk to us