This Act creates a framework for managing risks relating to critical infrastructure.