What Australia Security of Critical Infrastructure Act 2018 (as Amended 2022) - Positive Security Obligations, Enhanced Cyber Security Obligations (Systems of National Significance), Government Assistance and 12-Hour Incident Reporting requires
This Act requires responsible entities of Australian critical infrastructure assets to adopt a risk management program (Part 2A), maintain a register of critical assets, and mandatorily report significant cyber security incidents to the Australian Cyber Security Centre within 12 hours of becoming aware (Part 2B, Section 30BC). It also establishes enhanced obligations for designated Systems of National Significance (SoNS) and provides government assistance powers to respond to serious incidents.
Pillar: Cybersecurity · Authority: Australian Government Department of Home Affairs · Version: 1.0.0 · Last updated:
Primary source: https://www.legislation.gov.au/C2023C00237/latest/text
SHA-256 integrity: c1a32ad14045cc181231d0f89268da20ef1367aee070c0390d4d46c29ec78459
Primary Citations — 7 traced to source
- Security of Critical Infrastructure Act 2018 (Cth), Part 2A - Positive security obligation
- Security of Critical Infrastructure Act 2018 (Cth), Section 30AH - Obligation to have, and comply with, a critical infrastructure risk management program
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/australia-security-critical-infrastructure-act-2022.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/australia-security-critical-infrastructure-act-2022.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/australia-security-critical-infrastructure-act-2022
- Back to registry: Browse all 10,099 compliance nodes