Latest amendments to the Security of Critical Infrastructure Act 2018: A major shift impacting critical infrastructure owners and operators

On 29 November 2024, the Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Act 2024  received Royal Assent, bringing significant changes to the Security of Critical Infrastructure Act 2018 (SOCI Act).

One key update impacts responsible entities for critical infrastructure assets. If a data storage system used in connection with a critical infrastructure asset stores or processes business critical data, that system now qualifies as part of the critical infrastructure asset and must be protected to the same level.

In this episode, the Pentagram Advisory team delves into this major amendment, exploring its implications for infrastructure owners and operators. We also offer practical guidance on the steps organisations should take to comply with these changes effectively.