Security of Critical Infrastructure Act 2018 – where are all the compliance timeframes?

Entities in key infrastructure sectors across Australia who have been following the expansion of the Security of Critical Infrastructure Act 2018 (Cth) (SOCI Act) may wish to note that all of the expected legislative amendments are now law, and integrated into the SOCI Act. The consolidated version of the SOCI Act is available, as are our initial observations on its operation.

Many entities will be familiar with the suite of positive security obligations imposed by the new SOCI Act on a wide array of industry sectors. As a refresher, these obligations are to:

• report to the Commonwealth's register of critical infrastructure assets (Register)
• implement a Critical Infrastructure Risk Management Program (CIRMP)