Security of Critical Infrastructure Act 2018 (SOCI)
Parts 2A and 2AA: Critical infrastructure risk management programs and annual reports – Security of Critical Infrastructure Act 2018 (SOCI)

Security of Critical Infrastructure Act 2018 (SOCI) s30AC: Adopt and maintain a critical infrastructure risk management program

The responsible entity for one or more critical infrastructure assets to which Part 2A applies (assets specified in the rules or a s 51 declaration, after any rules grace period) must adopt and maintain a written critical infrastructure risk management program that applies to it. Part 2A does not apply to assets used for services under a strategic-level Hosting Certification Framework certificate or covered by a law specified in the rules (s 30AB(4) to (6)); those entities report under Part 2AA instead.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Parts 2A and 2AA: Critical infrastructure risk management programs and annual reports – Security of Critical Infrastructure Act 2018 (SOCI)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Security of Critical Infrastructure Act 2018 (SOCI) controls