Shield
4
Protected critical
infrastructure
Our critical infrastructure and essential government systems
can withstand and bounce back from cyber attacks.
What success looks like
In 2030, every Australian should have peace of mind, knowing that essential services – such as our
electricity grid, water supply and banking systems – are able to withstand and bounce back from
hazards that might disrupt their functions. The array of critical infrastructure we rely on every day
must be able to better prevent, respond, and be resilient to cyber attacks.
Owners and operators of critical infrastructure and designated Systems of National Significance
need to have clear visibility of the risks they face – including cyber threats, personnel risks,
physical hazards and natural disasters. Under the SOCI Act, they must put appropriate risk
mitigation plans in place to protect against these threats. Through regulation and proactive
collaboration, the Government will work with industry to provide a high level of assurance that
owners and operators are complying with their security obligations.
The Australian Government will also lead by example. Government needs to hold itself to the
same standard as it imposes on industry. As we increasingly adopt new and enhanced
technology to support a range of government services, we will strive for a high level of cyber
maturity, fostering public trust that we meet world-class cyber security standards. In doing so,
we will work with state, territory and local governments to build a nationally consistent and
robust culture of cyber resilience.
38
2023–2030 Australian Cyber Security Strategy