Demystifying Australia's Recent Security Of Critical Infrastructure Act Reforms

The recent amendments to the Security of Critical Infrastructure Act 2018 ("the Act'") constitute some of the most significant cybersecurity reforms in Australia's history.

In many respects, this reform agenda now leads the world. The Act is part of an increasingly complex cybersecurity regulatory ecosystem. This high-level summary provides a simple overview to help demystify the complexities of the new regime.

KEY TAKEAWAYS

1. The full Security of Critical Infrastructure Act reforms (split in two, in December 2021 and in March 2022) are now in force.
2. While Government intervention and direction obligations have been in place since last December, positive security obligations and enhanced security obligations are now in effect.