Determining the applicability of the SOCI Act
A flowchart
Australia’s Security of Critical Infrastructure Act (SOCI Act), has a key role in safeguarding our digital and physical lifelines and it imposes substantial obligations on those organisations that are subject to it. Therefore, the importance of understanding and complying with the SOCI Act cannot be understated and unfortunately, failure to comply could result in substantial fines.
Given that the SOCI Act has seen significant amendments since 2021 and recently expanded its scope to cover 11 critical infrastructure sectors and 22 asset classes within those sectors, many organisations and their assets within essential industries could now be subject to new obligations without realising.
This includes:
- Communications, Telecommunications and Broadcast Networks
- Data Storage and Processing
- Defence Industry
- Energy Industry
- Financial Services and Markets
- Food and Grocery
- Health and Medical
- Higher Education and Research
- Transport
- Water and Sewerage
This flowchart authored by Alec Christie, Partner, Clyde & Co, is designed to help you determine, at a high level, whether your organisation or its assets may be subject to the Security of Critical Infrastructure Act 2018 (Cth) (SOCI Act).
For more detailed information on the application of the SOCI Act and whether your organisation may be at risk of severe penalties, check out the resources inside Practical Guidance Cybersecurity, Data Protection & Privacy. This is an invaluable guide for practitioners who want to follow best practices when preparing to advise on cybersecurity, data protection and privacy matters in today’s rapidly changing legal landscape.
Enter your details for instant access to this free flowchart
