Summary

Amends the: Security of Critical Infrastructure Act 2018 to: enhance the existing framework for managing risks relating to critical infrastructure by introducing: additional positive security obligations for critical infrastructure assets, including a risk management program, to be delivered through sector-specific requirements and mandatory cyber incident reporting; enhanced cyber security obligations for assets of national significance; government assistance to relevant entities for critical infrastructure sector assets in response to significant cyber attacks; and make amendments contingent on the commencement of the Federal Circuit and Family Court of Australia Act 2020; Administrative Decisions (Judicial Review) Act 1977 to exclude certain decisions from judicial review; AusCheck Act 2007 to enable background checks should they be required as part of a critical infrastructure risk management program; National Emergency Declaration Act 2020 and Security of Critical Infrastructure Act 2018 to make amendments contingent on the commencement of the National Emergency Declaration Act 2020; and Criminal Code Act 1995 to provide for an immunity to apply in relation to the Australian Signals Directorate for conduct occurring outside of Australia.