The Australian government has increased the number of CNI organizations subject to cyber regulation from 87 to 168, that is a significant increase

← Back to Blog

The Australian government has increased the number of CNI organizations subject to cyber regulation from 87 to 168, that is a significant increase. (The list was not public at time of writing this).

‘Under the new obligations, designated organizations have to create response plans for cyber incidents, prep themselves through cyber security exercises, obtain assessments to identify and fix vulnerabilities and hand over system information to the Australian Signals Directorate (ASD) “to develop and maintain a near-real-time threat picture.”’

Covered CNI providers that include organisation from the energy, communications, transport, financial services and markets, data storage a processing sectors are required to assess and mitigate risks impacting their operations. This is similar to the requirements set out in EU NIS 2 and DORA, and the requirements for cybersecurity of CNI providers by the U.S ONCD earlier in 2023.

We are starting to see cyber regulation move across CNI globally Ted Dziekanowski

#cybersecurity #cyberregulation #cyberriskmanagement

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7107274471979241473