Australian Government

Federal Register of Legislation

Scheduled Maintenance - Tuesday 30 December 2025 from 8pm AEST

Maintenance is scheduled between 8.00 - 11.30 pm AEST, Tuesday 30 December 2025 and the site may be unavailable or slow during this time.

Security of Critical Infrastructure Act 2018

In force

Administered by

Department of Home Affairs

Superseded version

View latest version

View as made version

C2023C00334 C05

18 October 2023 - 19 October 2023

Table of contents

Part 1—Preliminary
Part 2—Register of Critical Infrastructure Assets
Part 2A—Critical infrastructure risk management programs
Part 2AA—Reporting obligations relating to certain assets that are not covered by a critical infrastructure risk management program
- 30AP Simplified outline of this Part
- 30AQ Reporting obligations relating to certain assets that are not covered by a critical infrastructure risk management program
Part 2B—Notification of cyber security incidents
Part 2C—Enhanced cyber security obligations
Part 3—Directions by the Minister
- Division 1—Simplified outline of this Part
  - 31 Simplified outline of this Part
- Division 2—Directions by the Minister
Part 3A—Responding to serious cyber security incidents
Part 4—Gathering and using information
Part 5—Enforcement
Part 6—Declaration of assets by the Minister
- Division 1—Simplified outline of this Part
  - 50 Simplified outline of this Part
- Division 2—Declaration of assets by the Minister
Part 6A—Declaration of systems of national significance by the Minister
- Division 1—Simplified outline of this Part
  - 52A Simplified outline of this Part
- Division 2—Declaration of systems of national significance by the Minister
Part 7—Miscellaneous
Endnotes