Govt passes critical infrastructure safeguards
The federal government has passed new legislation designed to safeguard Australia’s critical infrastructure against cyber attacks, threats of espionage and foreign interference.
The new legislation expands the capability of the Critical Infrastructure Centre by introducing a new ministerial directions power allowing the government to take access where a risk cannot otherwise be mitigated.
It is also establishing a register of Australia’s highest risk critical infrastructure assets, including information on ownership access and control.
Announcing the passage of the legislation, Minister for Home Affairs Peter Dutton said increased foreign investment and involvement in Australia’s critical infrastructure means it is more exposed than ever to sabotage, espionage and coercion.
“[The legislation] will significantly enhance the Critical Infrastructure Centre’s capacity to assess and manage complex risks,” he said.
Macquarie Government Managing Director Aidan Tudehope called the passage of the legislation a “crucial step forward” in protecting the nation’s critical infrastructure from cyber attack.
“The sad reality is that there are individuals, groups and even nations that have shown a willingness and ability to put the wealth, health and even lives of innocent Australians at risk by attacking critical infrastructure,” he said.
“Much of the infrastructure that allows us to operate in our day-to-day lives — power, communications, water, transport systems — are privately owned, and all are completely dependent on information and communications technologies to work.”
The legislation will extend obligations for private sector and state government owners and operators of critical infrastructure to comply with the programs developed to protect the government’s own agencies from cyber attack, such as the restrictions and recommendations from the Australian Signals Directorate, he said.
“The new laws mean the country’s leading cybersecurity experts in Canberra can now investigate the practices by these owners and operators. If necessary, the Minister can step in as a last resort,” Tudehope said.
“Hopefully this will never be necessary as the passage of the laws should be enough to prompt critical infrastructure businesses to take action themselves to come into line with the standard practice for federal government agencies.”
Elastic develops automatic SIEM migration tool
Elastic's new Automation Migration tool is designed to enable users of existing SIEM tools...
CrowdStrike releases agentic AI for the SOC
At RSA in San Francisco this week, CrowdStrike has unveiled AI-powered innovations aimed at...
Despite rising concerns, 95% of organisations lack a quantum computing roadmap: ISACA
A quarter of poll respondents believe quantum computing’s transformative potential...