{
  "node_id": "au-security-of-critical-infrastructure-act-2018-soci",
  "title": "Australia Security of Critical Infrastructure Act 2018 (SOCI) - Positive Security Obligations",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-01-01",
  "bluf": "The Security of Critical Infrastructure Act 2018 (Cth) imposes positive security obligations on owners and operators of 22 critical infrastructure asset classes across 11 sectors. Responsible entities must register assets, implement Critical Infrastructure Risk Management Programs (CIRMPs), and report significant cyber incidents to the Australian Cyber Security Centre (ACSC) within 12 hours (for critical incidents) or 72 hours.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "frameworks",
      "standards",
      "industry_mapping"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "au-privacy-act-1988-app-3-collection-personal-info"
  ],
  "primary_citations_count": 5
}