SOCI Act Relevant Information Record (CIRMP, Asset Register, SoNS Obligations)

Documents that are "relevant information" under s 5A of the Security of Critical Infrastructure Act 2018 (Cth): a critical infrastructure risk management program (CIRMP, s 30AC) and the annual CIRMP report (s 30AG: up-to-date statement for a financial year, board or governing body approval, hazards with a significant relevant impact; LIN 23/006 and LIN 26/075 terms), Register of Critical Infrastructure Assets submissions (s 6 interest and control information, s 7 operational information), and Systems of National Significance enhanced cyber security obligation documents (incident response plan s 30CD, cyber security exercise evaluation reports s 30CQ / 30CR, vulnerability assessment report s 30CZ, system information reporting notices s 30DB / 30DC). There is no statutory marking for this material, so the classifier does not anchor on "PROTECTED" or any other label.

Type: regex
Engine: boost_regex
Confidence: medium
Confidence justification: Medium: the primary terms are statutory and distinctive, but CISC guidance, the legislation and law-firm commentary use every one of them, and there is no statutory marking or public identifier for CIRMPs, register entries or SoNS reports. Enforce tiers therefore depend on populated record fields laid out like register submissions and annual reports. 85/75 are heuristic evidence tiers, not measured accuracy; test values are synthetic.
Jurisdictions: au
Regulations: Security of Critical Infrastructure Act 2018 (Cth), Security of Critical Infrastructure (Critical infrastructure risk management program) Rules (LIN 23/006) 2023, Enhanced Critical Infrastructure Risk Management Program Rules 2026 (LIN 26/075)
Frameworks: PSPF, QGISCF
Data categories: security, infrastructure, government
Scope: narrow
Risk rating: 9
Platform compatibility: Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Degraded, Netskope: Unsupported

Pattern

(?i)\b(?:critical\s+infrastructure\s+risk\s+management\s+program(?:me)?|CIRMP|Register\s+of\s+Critical\s+Infrastructure\s+Assets|systems?\s+of\s+national\s+significance|enhanced\s+cyber\s+security\s+obligations?|(?:section|s\.?)\s?30(?:AC|AG|AQ|CD|CH|CQ|CR|CZ|DB|DC))\b

Corroborative evidence keywords

significant relevant impact, relevant Commonwealth regulator, Cyber and Infrastructure Security Centre, enhanced CIRMP requirement, baseline CIRMP requirement, credential compromise hazard, lateral movement hazard, maximum acceptable outage, relevant security clearance

Proximity: 300 characters

Should match

Critical infrastructure risk management program - annual report (s 30AG) Responsible entity: Coralbay Water Services Pty Ltd ABN: 62 000 641 439 Financial year: 2025-26 The CIRMP was up to date at the end of the 2025-26 financial year. Approved by the board at its meeting on 14 August 2026. Hazards that had a significant relevant impact: credential compromise hazard at the Tarrant Creek treatment plant historian. — 85 tier - completed s 30AG annual report with entity, ABN, financial year, up-to-date statement and dated board approval plus LIN 26/075 hazard term
Register of Critical Infrastructure Assets - operational information (s 7) Asset location: 220 Quarry Road, Brendale QLD 4500 (gas storage facility) Area serviced and operator arrangements will be provided in the next submission. — 75 tier - register submission with one populated operational field
Register of Critical Infrastructure Assets - interest and control information (s 6) Direct interest holder: Marlin Harbour Infrastructure Holdings Ltd Country of incorporation: Singapore Type and level of interest: 45% ordinary shares with board appointment rights Submitted to the Cyber and Infrastructure Security Centre on behalf of the responsible entity. — 85 tier - s 6 interest and control information with holder, country and interest percentage plus CISC
System of national significance - vulnerability assessment report under s 30CZ Assessment date: 18/07/2026 Assessment scope: Northbank Energy market settlement platform and OT jump hosts Findings: 4 critical, 11 high; lateral movement hazard from IT to OT confirmed at two substations. — 85 tier - SoNS vulnerability assessment report with dated scope and LIN 26/075 hazard term
Incident response plan (s 30CD) - system of national significance Plan owner: Ingrid Salter, Head of OT Security The plan covers ransomware on the gas control system and loss of the primary control room. — 75 tier - SoNS incident response plan with a named plan owner

Should not match

Under s 30AG of the Security of Critical Infrastructure Act 2018 a responsible entity must give an annual report within 90 days after the end of the financial year. The report must state whether the CIRMP was up to date at the end of the financial year and be approved by the board, council or other governing body. The approved form is available at cisc.gov.au. — CISC / legislation guidance quoting s 30AG
CIRMP annual report - approved form Responsible entity: __________ ABN: __________ Financial year: ____ Board approval date: ____ Hazards that had a significant relevant impact: [describe] — Blank approved form
SOCI reforms: what the 2026 CIRMP rules mean for you. LIN 26/075 introduces enhanced CIRMP requirements, credential compromise hazards and a maximum acceptable outage for each critical system. This article is general information only and does not constitute legal advice. — Law-firm article
Energy operators say the systems of national significance regime has lifted compliance costs, with more than 160 assets now declared under the SOCI Act. — News reporting
CIRMP training exercise Responsible entity: Harbourview Water Pty Ltd Financial year: 2025-26 The CIRMP was up to date at the end of the 2025-26 financial year. — Training exercise (template-exclusion)

Known false positives

CISC guidance, the SOCI Act and CIRMP Rules, and law-firm, vendor and university commentary repeat every section number and statutory phrase. Mitigation: Guidance stays at 65 discovery; enforce tiers need populated record fields and exclude cisc.gov.au / legislation.gov.au URLs, "Civil penalty:" and compilation headers, and law-firm disclaimers.
Blank approved forms and internal CIRMP templates. Mitigation: Blank lines, bracket placeholders and n/a/tbc values are rejected; template and training wording is excluded by the shared template-exclusion dictionary.
A genuine CIRMP that cites cisc.gov.au in its references section will be suppressed from enforce tiers. Mitigation: Accepted trade-off to keep guidance out; such documents still surface at 65 discovery.
PSPF PROTECTED documents unrelated to SOCI. Mitigation: The classifier does not use any security classification marking as an anchor; CISC notes SOCI protected information is not the PSPF PROTECTED classification.