# Security of Critical Infrastructure Act 2018

Source: au:frl:C2018A00029
Version: C2026C00213
Commit: 029a33510660693a2308daf7590d2d93aff727af

<source-content>
<section id="navPoint_6"><h5 id="v0-p-343"><strong>4</strong><strong>  </strong><strong>Simplified outline of this Act</strong></h5><ul><li><span></span><p id="v0-p-344">This Act creates a framework for managing risks relating to critical infrastructure.</p></li><li><span></span><p id="v0-p-345">The framework consists of the following:</p><ul><li><span>(a)</span><p id="v0-p-346">the keeping of a register of information in relation to critical infrastructure assets (the register will not be made public);</p></li><li><span>(b)</span><p id="v0-p-347">requiring the responsible entity for one or more critical infrastructure assets to have, and comply with, a critical infrastructure risk management program (unless an exemption applies);</p></li><li><span>(c)</span><p id="v0-p-348">requiring notification of cyber security incidents;</p></li><li><span>(d)</span><p id="v0-p-349">imposing enhanced cyber security obligations that relate to systems of national significance;</p></li><li><span>(da)</span><p id="v0-p-350">imposing enhanced security obligations for critical telecommunications assets;</p></li><li><span>(e)</span><p id="v0-p-351">requiring certain entities relating to a critical infrastructure asset to provide information in relation to the asset, and to notify if certain events occur in relation to the asset;</p></li><li><span>(f)</span><p id="v0-p-352">allowing the Minister to require certain entities relating to a critical infrastructure asset to do, or refrain from doing, an act or thing if the Minister is satisfied that there is a risk of an act or omission that would be prejudicial to security;</p></li><li><span>(g)</span><p id="v0-p-353">allowing the Secretary to require certain entities relating to a critical infrastructure asset to provide certain information or documents;</p></li><li><span>(h)</span><p id="v0-p-354">setting up a regime for the Commonwealth to respond to a serious incident that has had, is having, or is likely to have, one or more relevant impacts on one or more critical infrastructure assets;</p></li><li><span>(i)</span><p id="v0-p-355">allowing the Secretary to undertake an assessment of a critical infrastructure asset to determine if there is a risk to national security relating to the asset.</p></li></ul></li><li><span></span><p id="v0-p-356">Certain documents or information obtained, generated or adopted under, or relating to the operation of, this Act is protected information. There are restrictions on when a person may make a record of, use or disclose protected information.</p></li><li><span></span><p id="v0-p-357">Civil penalty provisions of this Act may be enforced using civil penalty orders, injunctions or infringement notices, and enforceable undertakings may be accepted in relation to compliance with civil penalty provisions. The Regulatory Powers Act is applied for these purposes. Certain provisions of this Act are subject to monitoring and investigation under the Regulatory Powers Act. Certain provisions of this Act may be enforced by imposing a criminal penalty.</p></li><li><span></span><p id="v0-p-358">The Minister may privately declare an asset to be a critical infrastructure asset.</p></li><li><span></span><p id="v0-p-359">The Minister may privately declare a critical infrastructure asset to be a system of national significance.</p></li><li><span></span><p id="v0-p-360">The Secretary must give the Minister reports, for presentation to the Parliament, on the operation of this Act.</p></li></ul></section>
</source-content>



Evidence: e-58e6114205b9e6c0ba6649c1a10271b5be0cf3d16e07a49fca85fd39327d8640 (Official Word document (original revision); file 6cc99b7f2c8350a52b9c37816bdf7e1e886defa06768db74c5b9f86551a40070)
Evidence: e-9720c1fed60505ba0ba06be6819b076faed60ab8a7da619ec5ee7226b4203566 (Official PDF (original revision); file 202268babdf7a3a14762336f46740469ec2140cf85d1de613c0298447c112aad)
Evidence: e-cf3848f9b1d9b10a29d8db7c7dee3c4b341fe7c21bf6e6c0e813122bdf67dffc (Official source HTML; file e743ab13aef66f650871b056fafee9d9d007f717764fc114a675f9d7cfb4b935)
Evidence: e-5af1740fabea6daefffdec7b60ecad33b1c1824fff8891d544270aea1c53bf41 (Original stylesheet; file 9b44dc931c36df5f18981e5c446f246ba2879f4bcdd177df12ad1cc38d30ea16)
Evidence: e-9b9a285f56a7a2bf7e5b886fa766a0701b401ff9e91ab3597b27a0f911b16684 (Commonwealth Coat of Arms; file 154911fcca780323e2367b03d8d81318f956046ed9bc79062c522edd814248b4)
Evidence: e-8932559d88335593310941975770a73241715c052989fab9f1be4ac55bfd6b06 (Original structured document; file 9ac2deca18054d563d19693299f407ec6662d61693530d0775f93da1f1370e1b)
Evidence: e-f943f8ddceaa6260cb2d8453269489b74563665c66dcaf4f2711a394dd8ddb50 (Original provenance metadata; file 786e917e3c8a5875459bd2003065de9e9eacf9fe119d27b1cd086a8e13de8e2e)
Evidence: e-ed16c6eb3ca7f9041ccc569c70802773c595622049a9388c9501f988317d24a6 (Original document validation; file c35b76198bec501818a1a48ed89198262e0e928c757e473b7231f9a3b8fe350b)
Evidence: e-00424709ef1981dd20c16b4f54277ed8dfef13453fea759e60d460bb161de6b4 (Original source paragraphs; file 4a1cf510a98a5208bfa2dad17b29c30bf8b43bf8f80349a5eb1d2aea5b9fb181)
Evidence: e-ab7b62608fa9315e3725ed92791660aebf45e9cc54fe0a638386c5afc9ac2fa9 (Original import manifest; file a3a29090cdcd1d6d073a9408d03cf5e760c167cb79f7826172e34f7eaa7b8419)
Evidence: e-ece0bb12deb20dd0391b4368e3f6fa5e24b545041bb5dc8b6f90a5dfaff1b652 (Retained publication provenance; file 05ebaa47d26c1515a2f2e40741877bfd5fa9a7c3cba046ab8e45df2e1288f4c7)
Evidence: e-e825ba4321582aa28bd076e7f58a11a4cd3b79324f226fd5224768d6f649eaaf (Official Word document (current revision); file 0c6af2c493b4cef958d8c93bb532fa9bee99173e4fd9f1f5fd258ec7bcc6c0e0)
Evidence: e-80f83290098701c40d8a1a211e71212f92bdb6e5721a7b74e10dc09707760a29 (Official PDF (current revision); file 863bd718d0348ffccf1fff803566f455ef5eb84d4188c3889ac056507ec3703f)
Evidence: e-4455f382852e9cadd8970041a983ed634aa882178ad4546f343ab5773003e280 (Official Word document (original revision); file f428a88036bc4a9268f86ce488e7afa9f6b0527337b371707dad0d89ef325b93)
Evidence: e-dfebbabf990a79807e47a661208714c056e723edd06ec795db155c6f12713f28 (Official PDF (original revision); file 3a0a2c0a2b49efe9cd30072d7a5c2c177b8ebac2ab17e363bb152e7d831115af)
Evidence: e-fbf43defd7f79d2a4dbb007fa3f6ca820fa5abd3f35168648a8327877fc59f6b (Official EPUB (original revision); file f56f5b52c6fb936fd7c7b6e75fa228da74bbe66f58d71b76056d8ebd600ca9ef)
Evidence: e-487a9df7ad31d5f3ccc608212f9d27e12cd4566ce2af0eb39323013d4f231ac9 (Official source HTML; file f6a8dd06cbdeb355bf79b3ee800f26607ebdf213a18f1ba82184f79748cc6f18)
Evidence: e-a0d2a0fd6a86bee96b6bd5b982670521f65d3774d9aa97504d6651eab7288fb9 (Original stylesheet; file ffdb9181f16a83f3392ff5a975055423d2d3601872ac649ca26adb1e1490bb84)
Evidence: e-b47bed8fab101243cdea1ecac219e3ec9e229a9bc437858b5a654c257f1dbf05 (Commonwealth Coat of Arms; file ca304523ec1a65ffdf482c017915ad9b5fd6e441785fc2dcc78c7e1c8be0ecc1)
Evidence: e-2f1a4282be9de2bb3d8aa6a4a41ee42ac17b3723fb82d8dd30a03a032872bb9b (Original structured document; file 718d24c71d268fc40f8b2a76691e663c177f383c4e9dd536aff22baf471c8198)
Evidence: e-0e51e58a9ee73c6dc1a26e73992f098351ea181a0abe9f8ca6972153b75c75be (Original provenance metadata; file 397890fb4251d1cc858a59381fb47efcac2c17fda225fdff32a0eabbe7e801a0)
Evidence: e-8758c662b7ee97afdacb2977d7415bee9562332da8cc33db132962e235cd9dca (Original document validation; file 9e736d7fcdcafe87883f8ee3248663e6eef0fb6ee36d1a55421f7621f7a1772f)
Evidence: e-88adeb460f53d4b13c88e999880f4fdd3d5afa75f0b2ec7c31880ca1acbfae3b (Original source paragraphs; file 0bc3e5bbfef546528217c779504fa9e8cfac9af86a7c06eb178bf5045fea4654)
Evidence: e-d1525d85271580753cf110099f77f299c8401eb297633d906dafe7f232520ff3 (Original import manifest; file a25f9027894e99a402a35cd1db029d7dec1240fac2ec31ebe66458446e6279f4)
Evidence: e-f2eee0cd7e827fbbd60cf65eceb4e089f5e455fed6342e8d9e60fe318c90cfc5 (Retained publication provenance; file 57ce201878423d26bda8d491862b3d9e192e573e9f2bb23c3688afd8a9671047)
Evidence: e-28ccf2e15c63edaac0c76a8b73b918a0e6de33f5d9bc7bb2934ecfc4b1541da5 (Retained legislative events catalogue; file a7c765d2678ac6d1e29cea7a469b79e086cfc6b115a95f47e4dc6287d37ca616)
Evidence: e-772579cae1da957e8637199f364da8db89d297cdbf7602b7709cbd498d22888d (Retained legislative publication record; file 06b68f05cc7984892ac6f216a2f72cf4b80996dbd98387deddbb2333894ecab1)
Evidence: e-f171e8096135b6c246af03bd1275c7e291c29ef657a71aa9788fc424ffd00049 (As-made Act PDF: Security of Critical Infrastructure Act 2018; file c99f9a3e3edf5e23086a601dacc4fa6edc901e8927c61d28ec8805b461d4a896)
Evidence: e-5aa20a7e82cac98adb8af7c64d58378972c5c4645024649cfce25b126cf9e045 (As-made Act PDF: Security of Critical Infrastructure and Other Legislation Amendment (Enhanced Response and Prevention) Act 2024; file ae00333cb66ca6f5fd80b0da7dc98b1986cefcd078b7c7198b95ca192e4d168c)
Evidence: e-724ecc4bb31e9b369933d8578356dbe7f7837ecf78f63274b836952e045f8f25 (AI draft (@cf/meta/llama-3.3-70b-instruct-fp8-fast); file 18478600c97acd0503406ffdcaeee54a92818612f2e4046ca964039ec9970b9f)
Evidence: e-4d59c56a93ca6c2d2a9c173487935b0f93372f71b510a95931515977d7239b73 (Retained AI review and publication record; file bca92734ee10ba895742d99232e021751d145db017a14d4d53bc5d8d25d56724)