{
  "node_id": "australia-security-critical-infrastructure-act-2022",
  "title": "Australia Security of Critical Infrastructure Act 2018 (as Amended 2022) - Positive Security Obligations, Enhanced Cyber Security Obligations (Systems of National Significance), Government Assistance and 12-Hour Incident Reporting",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-18",
  "bluf": "This Act requires responsible entities of Australian critical infrastructure assets to adopt a risk management program (Part 2A), maintain a register of critical assets, and mandatorily report significant cyber security incidents to the Australian Cyber Security Centre within 12 hours of becoming aware (Part 2B, Section 30BC). It also establishes enhanced obligations for designated Systems of National Significance (SoNS) and provides government assistance powers to respond to serious incidents.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "australia-essential-eight-2023",
    "nist-cybersecurity-framework-2-0",
    "iso-27001-2022",
    "nis2-incident-reporting-article-23",
    "cisa-cross-sector-cybersecurity-goals"
  ],
  "primary_citations_count": 7
}