LIN 22/056

Security of Critical Infrastructure (Definitions) Amendment Rules (LIN 22/056) 2022 (No. 2)

I, Clare O’Neil, Minister for Home Affairs, make this instrument under section 61 of the Security of Critical Infrastructure Act 2018.

Dated 21 December 2022

The Hon Clare O’Neil MP

Minister for Home Affairs

1 Name

  This instrument is the Security of Critical Infrastructure (Definitions) Amendment Rules (LIN 22/056) 2022 (No. 2).

2 Commencement

  This instrument commences on the day after registration.

3 Schedules

  Schedule 1 amends Security of Critical Infrastructure (Definitions) Rules 2021 (LIN 21/039).

Schedule 1—Amendments

(section 3)

[1] Section 3

insert

.au ccTLD system means the system used in providing the ‘.au’ country code Top Level Domain (ccTLD) internet service.

[2] Section 3

insert

authoritative DNS name server means a computer server that provides authoritative DNS information about a domain name, which may include the Internet Protocol address of a website server or an email server.

[3] Section 3

insert

DNS means a domain name system, which is a component of the Internet that enables users to find and connect to local websites, email addresses and other Internet connected resources by mapping domain names to their corresponding Internet Protocol numeric addresses. 

DNSSEC means DNS Security Extensions that facilitate the digital signing of DNS records, to assist in ensuring the integrity and authenticity of DNS information.

[4] Section 3

insert

registrant information includes:

(a)   registrant legal entity name;

(b)   registrant identification number;

(c)   eligibility type;

(d)   eligibility name;

(e)   eligibility identification.

registrable superannuation entity has the same meaning as in the Superannuation Industry (Supervision) Act 1993.

[5] Section 3

insert

WHOIS service means a service or tool that provides domain information, including (any of) the following:

(a)   domain registrar;

(b)   registrar contact information;

(c)   domain name status;

(d)   DNS name servers;

(e)   IP addresses of DNS name servers;

(f)    DNSSEC information;

(g)   registrant information;

(h)   registrant contact information;

(i)     technical contact information.

[6] Section 14

omit

a registrable superannuation entity is critical to the security and reliability of the financial services and markets sector if it holds

insert

an RSE licensee is critical to the security and reliability of the financial services and markets sector if it is a trustee of a registrable superannuation entity that has

[7] Subsection 16(1)

omit

subparagraph

insert

paragraph

[8] Subsection 16(2)

substitute

 (2) For paragraph 12KA(2)(b) of the Act, an entity that administers the .au ccTLD system is critical to the administration of an Australian domain name system.

[9] After subsection 16(2)

insert

 (3) For paragraph 12KA(3)(a) of the Act, the following assets within the .au ccTLD system are critical to the administration of an Australian domain name system:

(a) registry database;

(b) public WHOIS service (https://whois.auda.org.au/);

(c) .au top level authoritative DNS name servers;

(d) the following second level authoritative DNS name servers:

 (i) .com.au;

 (ii) .net.au;

 (iii) .org.au;

 (iv) .asn.au;

 (v) .id.au;

 (vi) .edu.au;

 (vii) .gov.au.

[10] After section 18

insert

Division 2.3 Assets that are not critical infrastructure assets

19 Sugar mills

 (1) For paragraph 9(2)(j) of the Act, a critical electricity asset mentioned in subsection (2) is not a critical infrastructure asset. 

 (2) An asset mentioned in an item in the following table that is owned or operated by the entity mentioned in the item. 

[11] Schedule 1, items 1, 2, 3 and 4

substitute

[12] Schedule 1, items 7 and 8

substitute

[13] Schedule 1, items 11 and 12

substitute