Security of Critical Infrastructure (SOCI)
For clients that own, operate or have direct interests in ‘Critical Infrastructure’ Osprey International provides support ensuring that the obligations of the Security of Critical Infrastructure (SOCI) Act 2018 are met as part of the annual reporting requirements to the national Regulator.
Osprey International has intimate knowledge of the SOCI Act 2018 since inception and more recent revisions rolled out in 2023 and 2024 that focuses on the four (4) key risks of Cyber Security, Physical Security, Personnel Security, Supply Chain Security that encapsulates and “All Hazards” approach.
Critical Infrastructure
Critical Infrastructure as defined by the Regulator is:
“those physical facilities, supply chains, information technologies and communication networks, which if destroyed, degraded or rendered unavailable for an extended period, would significantly impact the social or economic wellbeing of the nation, or affect Australia’s ability to conduct national defence and ensure national security.”
Obligations and regulations in the SOCI Act may apply to your organisation if it falls within one of the eleven (11) sectors detailed below and your organisation owns, operates and or has a direct interest in the Critical Infrastructure asset.
SOCI Act 2018
The following sectors are required to be comply with the SOCI Act 2018.
- Communications,
- Financial Services and markets,
- Data storage and processing,
- Defence Industry,
- Higher Education and research,
- Energy,
- Food and grocery,
- Healthcare and medical,
- Space technology,
- Transport,
- Water and Sewage.
Osprey International is well placed to assist in the governance, compliance and assurance with the SOCI Act 2018.
