In light of the rapidly evolving situation in the Ukraine, organisations – especially owners and operators of critical infrastructure assets – should be on alert for potential cyber attacks, particularly through the use of malware and ransomware.
Due to the increased risk of cyber attacks, the Cyber and Infrastructure Security Centre (CISC), acting under the instruction of the Department of Home Affairs, has made a strong recommendation to all owners and operators of critical infrastructure assets. It has asked them to voluntarily commence implementing the obligations proposed in the draft Risk Management Rules under the Security Legislation Amendment (Critical Infrastructure Protection) Bill 2022 (Cth) (SLACIP Bill), which is currently before Parliament.
Security of Critical Infrastructure laws
The security of critical infrastructure laws are being introduced in two tranches, and enact (or will enact) the following measures:
1. Amendments already introduced in the Security Legislation Amendment (Critical Infrastructure) Act 2021 (Cth)
Asset register
If ‘turned on’ for a particular asset by Rules to be made by the Minister for Home Affairs (Rules), reporting entities must…