The Albanese Government has declared another 87 critical infrastructure assets to be Systems of National Significance, bringing the total number of Systems of National Significance to 168 across the energy, communications, transport, financial services and markets, and data storage or processing sectors.
Systems of National Significance are Australia’s most vital critical infrastructure assets that underpin our social and economic stability, defence and national security.
Being declared a System of National Significance means the Australian Government can apply a robust set of enhanced cyber security obligations on the owners and operators.
These obligations include developing response plans to prepare for a cyber security incident; undertaking cyber security exercises to build cyber preparedness; undertaking assessments to identify and fix vulnerabilities; and providing system information to the Australian Signals Directorate to develop and maintain a near-real time threat picture.
These declarations follow the Government switching on the Critical Infrastructure Risk Management Program obligation in February 2023. The Risk Management Program requires owners and operators of critical infrastructure assets to consider all hazards they may face as a business and take tangible steps to manage risks impacting their operations.
Owners and operators of critical infrastructure assets were given a grace period of six months to establish a risk management program, during which the Department of Home Affairs engaged extensively with industry to aid understanding and compliance. The grace period expired at midnight on 17 August 2023.
For more information about these requirements:
QUOTES attributable to Minister for Home Affairs and Cyber Security Clare O’Neil
“We are relentlessly focused on safeguarding our country against significant cyber attacks, but it’s not something we can do alone,” Minister O’Neil said.
“I want to thank the owners and operators of Systems of National Significance for helping make Australia the most cyber secure country in the world,” Minister O’Neil said.
“The protection of our critical infrastructure is a shared responsibility, and these declarations will help to build vital partnerships with the owners and operators of our most important assets,” Minister O’Neil said.
