Australian Critical Infrastructure Act requires increased cybersecurity maturity
Minimize risk, prioritize remediation efforts, reduce cybersecurity compliance and reporting costs, and increase reporting speed.
Learn how the Skybox Security Posture Management Platform helps customers address Act requirements including:
- Adopt and maintain a risk management program for specificized assets
- Mandatory reporting of serious cyber incidents for specified assets
- Adopt and maintain an incident response plan for cybersecurity incidents
The Australian Security of Critical Infrastructure Act provides a framework for managing the complex and evolving national security risks relating to critical infrastructure – including sabotage, espionage, and coercion posed by foreign interference. Many organizations are experiencing a substantial compliance gap due to the Security Critical Infrastructure Act of 2018 and its recent amendments.
In December 2021, amendments to the Act expanded coverage from four to eleven critical infrastructure sectors and 22 asset classes. Not surprisingly, organizations in the newly nominated sectors have the most significant gap. Those covered previously, however, may also need to take steps to comply with new provisions.
The extended coverage and new provisions included in the recent amendments to the Act have created significant compliance gaps for many organizations. Skybox Security can help organizations get ahead of these gaps by taking a proactive approach to mature their cybersecurity programs. This requires the creation of mature, consistent, and organization-wide security posture management programs. A joint approach across the IT and OT organizations enables leaders to optimize security planning, deployment, and remediation processes to reduce exposure risk.
