SOCI Act

A refinery

Understanding security obligations under the
SOCI Act

The Security of Critical Infrastructure (SOCI) Act mandates that organisations managing critical infrastructure implement strong cybersecurity measures.

  • Identify infrastructure assets that fall under SOCI Act regulations.

Risk management and continuous compliance reporting

Organizations must implement a structured approach to risk management and compliance reporting to meet SOCI Act obligations.

  • Conduct regular cybersecurity risk assessments and audits.
  • Maintain transparent security reporting for regulatory compliance.
A man stands in front of yellow glowing signs
Man sits a 2 monitors

Incident response planning and mandatory reporting

The incident response plans require robust processes, reporting procedures and business continuity planning.

  • Develop and test SOCI-specific incident response protocols.
  • Conduct cyber resilience drills to assess preparedness.
  • Regularly review processes to identify significant and relevant cybersecurity incidents.

Registration of critical infrastructure assets

Organisations must register certain information related to critical infrastructure to the Infrastructure Security Centre (the Centre).

  • Identify relevant assets that require registration.
  • Perform risk assessment against each of the assets and manage risks
  • Require contractual cybersecurity compliance obligations for vendors.
Pa[er work and a calculator

SOCI Act blog

View all blog
Need Immediate Help?

Stay ahead of cyber threats

Download our comprehensive guide for free and start securing your data today.

Get started