New cybersecurity requirements for the Australian transport sector

In 2018, the Critical Infrastructure Act 2018 (Cth) came into force (Act). The Act is part of the Commonwealth government's focus on ensuring the protection of critical infrastructure from cyber threat.

The Act requires the establishment and maintenance of a register setting out the ownership of critical infrastructure assets, a government information request power, and a limited directions power enabling the Home Affairs Minister to direct owners and operators of critical infrastructure assets to take action to mitigate against national security risks if they do not already do so to the government's satisfaction.

Presently, the Act applies only to electricity, gas, ports, and water assets that meet certain criteria.