For awareness Medium Awareness
Australia updates risk guidance for critical infrastructure operators
Industrial Cyber
What happened. Australia's Critical Infrastructure Security Centre (CISC) published updated Critical Infrastructure Risk Management Program guidance and a companion snapshot. It helps entities identify material risks, consider controls and document them in their programmes.
Who is affected. Responsible entities for Australian critical infrastructure assets. Entities under the Telecommunications Security Risk Management Program should use it as best practice.
What to do. Review how the updated CISC guidance applies to your assets and risk management programme, and brief your team.
When to act. For awareness: background reading, nothing to schedule