What Australia Security of Critical Infrastructure Act 2018 (SOCI) - Positive Security Obligations requires
The Security of Critical Infrastructure Act 2018 (Cth) imposes positive security obligations on owners and operators of 22 critical infrastructure asset classes across 11 sectors. Responsible entities must register assets, implement Critical Infrastructure Risk Management Programs (CIRMPs), and report significant cyber incidents to the Australian Cyber Security Centre (ACSC) within 12 hours (for critical incidents) or 72 hours.
Pillar: Cybersecurity · Authority: Australian Government - Department of Home Affairs · Version: 1.0.0 · Last updated:
Primary source: https://www.legislation.gov.au/Series/C2018A00029
SHA-256 integrity: bfd446ee6f24e77aaf2d97afc31c5ad2ac0ec492ebc8e972d4865daea22371a4
Primary Citations — 5 traced to source
- Parts 2, 2A, 2B, 3A, 3B - Registration, CIRMP, Incident Reporting, SoNS — Security of Critical Infrastructure Act 2018 (Cth)
- CIRMP Rules - Risk Management Program Requirements — Security of Critical Infrastructure (Critical Infrastructure Risk Management Program) Rules 2023
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/au-security-of-critical-infrastructure-act-2018-soci.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/au-security-of-critical-infrastructure-act-2018-soci.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/au-security-of-critical-infrastructure-act-2018-soci
- Back to registry: Browse all 10,108 compliance nodes