As cited
Copy frozen at (site build).
ot ics
Australia’s CISC sharpens critical infrastructure risk guidance, urges stronger cyber and supply chain controls
Australia's Critical Infrastructure Security Centre published updated Critical Infrastructure Risk Management Program guidance establishing requirements for managing hazards across all critical infrastructure assets. The guidance clarifies obligations for identifying material risks, selecting and implementing security controls, and maintaining programs that address cyber, supply chain, physical, personnel, and environmental hazards. Responsible entities must maintain current programs, document risk assessments and control decisions, and submit annual compliance reports to regulators.
Why it matters: Critical infrastructure operators in Australia must review and update their risk management programs to meet mandatory CIRMP obligations; failure to comply carries civil penalties of 150 penalty units, and incidents affecting critical assets now comprise 10% of all reported cybersecurity incidents.
- Source published
- First seen by Cybersecurity Tracker