Security of Critical Infrastructure Act 2018 (SOCI)
Parts 2A and 2AA: Critical infrastructure risk management programs and annual reports – Security of Critical Infrastructure Act 2018 (SOCI)

Security of Critical Infrastructure Act 2018 (SOCI) s30AI: Vary the program as directed to fix serious deficiencies

The Secretary, or a senior official of a relevant Commonwealth regulator, may direct a responsible entity to vary its program to address specified serious deficiencies (deficiencies posing a material risk to national security, the defence of Australia or social or economic stability), within a period of at least 14 days, after giving notice and a 14-day opportunity to make submissions. The entity must comply, and the direction and resulting variation are reported in the annual report.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Parts 2A and 2AA: Critical infrastructure risk management programs and annual reports – Security of Critical Infrastructure Act 2018 (SOCI)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.