SOCI Act Obligations, Recent Reforms and the Role of Preemptive Cyber Defense

Summary

A practitioner explainer outlines Australia’s SOCI Act duties, 12- and 72-hour incident-reporting windows, recent reforms and proposed third-party obligations, while Silent Push argues that early infrastructure tracking can support threat visibility.

Key points

• The SOCI Act applies to entities that own, operate or hold a direct interest in covered critical infrastructure assets across 11 sectors.
• Most responsible entities must register assets, report cyber incidents and maintain a board-approved Critical Infrastructure Risk Management Program covering cyber, physical, personnel and supply-chain risks.
• The article says significant-impact critical incidents must be reported to the Australian Signals Directorate within 12 hours of awareness; lesser-impact incidents have a 72-hour window.
• Systems of National Significance face additional obligations, including incident-response planning, exercises, vulnerability assessments and sharing system information with government.
• The article describes 2024 reforms expanding the framework and adding ransomware-reporting and IoT security obligations.
• Proposed reforms could extend duties to managed service providers and strengthen supply-chain expectations; those proposals are still under consultation.
• Silent Push says its infrastructure tracking and Indicators of Future Attack signals can provide earlier threat visibility, while noting that the service does not replace CIRMPs, incident-response plans or legal advice.

MITRE ATT&CK

Vendors

Products

Countries

Industries

Related Articles

• Operation Blackout Disrupted West African Scam Networks Through Public-Private Cooperationdarkreading.comSilent Push
• Operation Blackout Disrupts West African Scam Centers, Leads to Arrests and Rescuessilentpush.comSilent Push