Security of Critical Infrastructure Act 2018 (SOCI)
Part 2C: Enhanced cyber security obligations for systems of national significance – Security of Critical Infrastructure Act 2018 (SOCI)

Security of Critical Infrastructure Act 2018 (SOCI) s30CU-30CZ: Undertake a vulnerability assessment and report within 30 days

What does s30CU-30CZ require?

On written notice, the responsible entity for a system of national significance must undertake, or cause to be undertaken, a vulnerability assessment testing the system's vulnerability to all or specified types of cyber security incidents, meeting any rules requirements, within the specified period, and give the Secretary a vulnerability assessment report within 30 days after completion (or a longer period allowed). The report is inadmissible against the entity in civil penalty proceedings other than for the reporting duty.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Part 2C: Enhanced cyber security obligations for systems of national significance – Security of Critical Infrastructure Act 2018 (SOCI)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Security of Critical Infrastructure Act 2018 (SOCI) controls