Security of Critical Infrastructure Act 2018 (SOCI)
Incident Reporting

Security of Critical Infrastructure Act 2018 (SOCI) AUSOCI-3: Cyber Incident Reporting (12/72 hours)

Per SOCI Sections 30BC + 30BD: cyber incident reporting. Requirements include (a) Critical Cyber Security Incident reporting within 12 hours of becoming aware to ASD ACSC + (b) Other Cyber Security Incident reporting within 72 hours + (c) maintain incident response capability + (d) cooperate with ASD on response + (e) maintain breach log + tabletops.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.