Shield 4 Protected critical infrastructure Our critical infrastructure and essential government systems can withstand and bounce back from cyber attacks. What success looks like In 2030, every Australian should have peace of mind, knowing that essential services – such as our electricity grid, water supply and banking systems – are able to withstand and bounce back from hazards that might disrupt their functions. The array of critical infrastructure we rely on every day must be able to better prevent, respond, and be resilient to cyber attacks. Owners and operators of critical infrastructure and designated Systems of National Significance need to have clear visibility of the risks they face – including cyber threats, personnel risks, physical hazards and natural disasters. Under the SOCI Act, they must put appropriate risk mitigation plans in place to protect against these threats. Through regulation and proactive collaboration, the Government will work with industry to provide a high level of assurance that owners and operators are complying with their security obligations. The Australian Government will also lead by example. Government needs to hold itself to the same standard as it imposes on industry. As we increasingly adopt new and enhanced technology to support a range of government services, we will strive for a high level of cyber maturity, fostering public trust that we meet world-class cyber security standards. In doing so, we will work with state, territory and local governments to build a nationally consistent and robust culture of cyber resilience. 38 2023–2030 Australian Cyber Security Strategy

Select target paragraph3