<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=592417851957511&amp;ev=PageView&amp;noscript=1">

THE CRITICAL INFRASTRUCTURE BILL - ARE YOU READY?

DOWNLOAD EXCLUSIVE
CHEAT SHEET

IS YOUR INDUSTRY COVERED BY THE PROPOSED AMENDMENTS?

The Critical Infrastructure Bill aims to minimise the security risk of critical infrastructure. However, for those with limited resources, limited funding, or pre-existing internal security risks to resolve, the burden to meet the new obligations may be challenging.

Our Governance, Risk and Compliance Team understands these challenges organisation's under the bill will face when the bill gets passed in parliament. To help you get started, we've put together our Critical Infrastructure Bill Cheat Sheet so organisation's can understand the impact of bill, who is obligated to be in compliance and roadmap to stay compliant. Download our cheat sheet today to improve your cybersecurity posture!

Please note: 
To receive this content, please enter a work email address and fill in the form correctly as our team will veto your details before sending you our cheat sheet.

 

Resources

Engagement On Critical Infrastructure Reforms

 

Security Legislation Amendment (Critical Infrastructure) Bill 2021

 

Second Critical Infrastructure Cyber Security bill passes parliament | 31.03.2022

 

ACSC Advisory:  Russian State-Sponsored and Criminal Cyber Threats to Critical Infrastructure

Mandatory Cyber Incident Reporting (MCIR) Guide​

What obligations you may need to address if you’re a critical infrastructure sector or have been identified to have systems of national significance (SoNS)?

To comply with the Enhanced CyberSecurity Obligations (ECSO), outlined in Part 2C of the SOCI Act.
The following obligations include:

  1. Developing cyber security incident response plans to prepare for a cyber security incident;
  2. Undertaking cyber security exercises to build cyber preparedness;
  3. Undertaking vulnerability assessments to identify vulnerabilities for remediation; and/or
  4. Providing system information to develop and maintain a near-real-time threat picture.

Note: The ECSO that the Secretary may apply to a SoNS will vary between each SoNS, depending on the specific role and function of that asset.

How we help organisations comply with the SOCI ACT:

Incident Response

A cross-functional team of experts to respond to cyber-attacks 24/7 for you.

Security Awareness Program

Grow and build an awareness program that changes the culture. Targeting employees, C-suite and board through ongoing training on the threats posed to you and your unique organisation based on the latest data.

TableTop Exercises

Test and improve your ability to respond to incidents in the safety of your board room. Advance response times, processes, and communication with the assistance of a security professional facilitating the sessions.

Vulnerability Management Service

Leveraging the same team who exploits your vulnerabilities – the service is delivered through the penetration testing team to identify vulnerabilities that matter.

Gap Assessment & Framework Compliance

Align and certify against globally recognised standards to enable you to meet the SOCI Act – NIST, ISO27001 & Essential 8.

Strategy Development

Gain holistic understanding of your current security posture, to define the gaps and set the future roadmap tailored specifically to your business.

Risk Assessment

Risk management is core to the SOCI Act, considering both your risks and the risks posed to you through your supply chain.

Continual Compliance

Loop’s advanced approach to ‘virtual CISO’, Continual Compliance adapts to your compliance obligations. First setting the strategy and driving your organisation to get there.

UNDERSTANDING THE IMPACT
OF THE BILL

PRESENTERS: PATRICK BUTLER, CEO & DR. SARAH MORRISON, GRC MANAGING CONSULTANT

LEARN HOW TO:

    • • Unpacking the Bill. What it is?

    • • How it impacts your organisation

    • • How to be prepared by proactively taking action today

To receive the full session, contact our team to chat about how we can provide you with more information!

HubSpot Video

 

EXPANDING THE CRITICAL INFRASTRUCTURE INDUSTRIES, ARE YOU REMAINING COMPLIANT?

The Bill seeks to amend the Security of Critical Infrastructure Act 2018 and expands its coverage from four sectors (electricity, gas, water and ports) to the following eleven critical infrastructure sectors. Download our guide to understand how it impacts your industry and operation.

Industries that are under the new bill:

  • Communications
  • Data Storage or Processing
  • Defence Industry
  • Financial Services and Market
  • Food and Grocery
  • Higher Education and Research
  • Healthcare and Medical
  • Transport
  • Energy
  • Space Technology
  • Water and Sewerage

NEED MORE INFORMATION?

Develop your understanding of the critical infrastructure bill further. Chat to our security specialists on how we can build a partnership to strengthen your security posture and remain compliant.