The Parliamentary Joint Committee on Intelligence and Security (PJCIS) has backed the passage of urgent reforms as part of a proposed two-step approach to protect Australia’s critical infrastructure from cyber threats.

Media release issue date: Wednesday, 29 September 2021

The Parliamentary Joint Committee on Intelligence and Security (PJCIS) has backed the passage of urgent reforms as part of a proposed two-step approach to protect Australia’s critical infrastructure from cyber threats.  In its Advisory report on the Security Legislation Amendment (Critical Infrastructure) Bill 2020 and Statutory Review of the Security of Critical Infrastructure Act 2018 tabled today, the Committee has recommended that emergency powers be swiftly legislated in a standalone bill, with a second, separate bill to be introduced following further consultation. This recommended two-step approach will enable the quick passage of laws to counter looming threats against Australia’s critical infrastructure, while giving businesses and government additional time to co-design the most effective regulatory framework to ensure long-term security of our critical infrastructure. The PJCIS has made 14 recommendations in relation to the Bill, including proposing a split in the current proposed framework into two amended Bills: Bill One for rapid passage – to expand the critical infrastructure sectors covered by the Act, introduce government assistance measures to be used as a last resort in crisis scenarios as well as mandatory reporting obligations; and Bill Two for further consultation – including declarations of systems of national significance, enhanced cyber-security obligations and positive security obligations which are to be defined in delegated legislation Chair of the Committee, Senator James Paterson, said: “The Committee received compelling evidence that the complexity and frequency of cyber-attacks on critical infrastructure is increasing globally. Australia is not immune and there is clear recognition from government and industry that we need to do more to protect our nation against sophisticated cyber threats, particularly against our critical infrastructure. “However, as the regulatory framework is still undergoing co-design with each of the eleven sectors and will not be finalised until after passage of the bill, many businesses have expressed concern about this uncertainty and asked for the entire bill to be paused in the current economic climate. “While sympathetic to the concerns of industry leaders, the Committee does not believe that pausing the entire bill is in Australia’s national interests given the immediate cyber threats that our nation faces. “The Committee’s recommended solution allows for the urgent measures to pass now to equip the government with the emergency powers it needs while allowing additional time for co-design to overcome the concerns of industry about the regulatory impact. “The passage of both bills is essential because cyber-security is not just the government’s job. Industry has a role to play too and the second bill which imposes obligations on businesses is an important part of a comprehensive response to the serious challenges we face,” Senator Paterson said. Further information on the inquiry as well as a copy of the report can be obtained from the inquiry website. Media inquiries: Chair, Senator James Paterson via Deborah Seccombe on 0451 255 891 or deborah.seccombe@aph.gov.au For background information:  Committee Secretariat (02) 6277 2360 pjcis@aph.gov.au For more information about this Committee, you can visit its website. On the site, you can make a submission to an inquiry, read other submissions, and get details for upcoming public hearings. You can also track the Committee and receive email updates by clicking on the blue ‘Track Committee’ button in the bottom right hand corner of the page.

The Parliament’s Intelligence and Security Committee will hold its fourth public hearing tomorrow as part of its Review of the Security Legislation Amendment (Critical Infrastructure) Bill 2020 and Statutory Review of the Security of Critical Infrastructure Act 2018.

Media release issue date: Wednesday, 28 July 2021

The Parliament’s Intelligence and Security Committee will hold its fourth public hearing tomorrow as part of its Review of the Security Legislation Amendment (Critical Infrastructure) Bill 2020 and Statutory Review of the Security of Critical Infrastructure Act 2018. The Committee will hear from the Department of Home Affairs and the Australian Signals Directorate (ASD) at a recall hearing to address evidence presented by industry and subject matter experts from previous hearings and in further submissions received to the inquiry. Senator James Paterson, Chair of the committee, said ‘The committee has heard from a wide range of independent experts and entities proposed for regulation by the Bill and the existing regime. “The Committee has heard important evidence, not just on how these laws may impact critical infrastructure service providers and their customers, but also on the scale of the cyber threat from both criminal and state actors.” “Committee members will seek the feedback of the Department and ASD to that evidence to assist us in formulating our report and recommendations.” Further information on the inquiry can be obtained from the Committee’s website. Public Hearing Details Thursday, 29 July 2021 2.00PM – 5.00PM (AEST) Committee Room 2R1, Parliament House, Canberra and via videoconference A program for the hearing is available on the Committee’s website and the hearing will be broadcast live at aph.gov.au/live. Media inquiries: Chair, Senator James Paterson via Deborah Seccombe, 0451 255 891 or deborah.seccombe@aph.gov.au For background information:  Please contact the Committee Secretariat 02 6277 2360 pjcis@aph.gov.au For more information about this Committee, you can visit its website. On the site, you can make a submission to an inquiry, read other submissions, and get details for upcoming public hearings. You can also track the Committee and receive email updates by clicking on the blue ‘Track Committee’ button in the bottom right hand corner of the page.

The Parliament’s Intelligence and Security Committee will hold two days of public hearings on Thursday 8 and Friday 9 July as part of its Review of the Security Legislation Amendment (Critical Infrastructure) Bill 2020 and Statutory Review of Security of Critical Infrastructure Act.

Media release issue date: Wednesday, 7 July 2021

The Parliament’s Intelligence and Security Committee will hold two days of public hearings on Thursday 8 and Friday 9 July as part of its Review of the Security Legislation Amendment (Critical Infrastructure) Bill 2020 and Statutory Review of the Security of Critical Infrastructure Act 2018. The Committee will hear from a selected range of industry, union and expert representatives that have engaged with the Committee for its review. Opening statements have been received from some witnesses and can be accessed as supplementary submissions. Senator James Paterson, Chair of the Committee, said ‘It is vital that we hear from the companies and industries affected by the proposed framework under the Bill, to ensure that the serious cyber security risks we face can be met effectively with the lowest possible regulatory burden and cost to consumers.’ Further information on the inquiry can be obtained from the Committee’s website. Public hearings details Thursday 8 and Friday 9 July 2021 9:30 am–5:00 pm (AEST) Committee Room 2R1, Parliament House, Canberra and via videoconference Programs for the hearings are available on the committee’s website and the hearing will be broadcast live at aph.gov.au/live. Media enquiries Chair, Senator James Paterson via Deborah Seccombe, 0451 255 891 or deborah.seccombe@aph.gov.au For background information Please contact the Committee Secretariat 02 6277 2360 pjcis@aph.gov.au For more information about this Committee, you can visit its website. On the site, you can make a submission to an inquiry, read other submissions, and get details for upcoming public hearings. You can also track the Committee and receive email updates by clicking on the blue ‘Track Committee’ button in the bottom right hand corner of the page.

The Parliament’s Intelligence and Security Committee will hold the first of a number of public hearings tomorrow as part of its Review of the Security Legislation Amendment (Critical Infrastructure) Bill 2020 and Statutory Review of the Security of Critical Infrastructure Act 2018.

Media release issue date: Wednesday, 9 June 2021

The Parliament’s Intelligence and Security Committee will hold the first of a number of public hearings tomorrow as part of its Review of the Security Legislation Amendment (Critical Infrastructure) Bill 2020 and Statutory Review of the Security of Critical Infrastructure Act 2018. The Committee will hear from the Law Council of Australia, Inspector-General of Intelligence and Security, Commonwealth Ombudsman, Office of the Victorian Information Commissioner, Office of the Australian Information Commissioner, and the Department of Home Affairs and the Australian Signals Directorate. Further information on the inquiry can be obtained from the Committee’s website. Public Hearing Details Friday, 11 June 2021 9.30AM – 3:30PM (AEST) Committee Room 2R1, Parliament House, Canberra A program for the hearing can be found here and the hearing will be broadcast live at aph.gov.au/live. Media inquiries: Chair, Senator James Paterson via Deborah Seccombe, 0451 255 891 or deborah.seccombe@aph.gov.au For background information: Please contact the Committee Secretariat 02 6277 2360 pjcis@aph.gov.au For more information about this Committee, you can visit its website. On the site, you can make a submission to an inquiry, read other submissions, and get details for upcoming public hearings. You can also track the Committee and receive email updates by clicking on the blue ‘Track Committee’ button in the bottom right hand corner of the page.

The Parliamentary Joint Committee on Intelligence and Security (PJCIS) has commenced a review into the Security Legislation Amendment (Critical Infrastructure) Bill 2020.

Media release issue date: Monday, 21 December 2020

The Parliamentary Joint Committee on Intelligence and Security (PJCIS) has commenced a review into the Security Legislation Amendment (Critical Infrastructure) Bill 2020. The bill review was referred to the Committee by the Hon Christian Porter MP, Attorney-General. As part of the referral, the Attorney-General suggested that the Committee also launch the review of the Security of Critical Infrastructure Act 2018(the Act), required by section 60A of that Act, at the same time. The Committee has agreed to undertake both reviews simultaneously, as the Bill amends the Act to be reviewed. The Bill is introduced to amend and build on the existing regulatory regime created by the the Act, to enhance security and resilience of critical infrastructure assets and systems of national significance. Expansion of the concepts to include systems of national significance is intended to widen the regime to address threats such as natural disasters and cyber-attacks. The Bill seeks to achieve this expansion by amending the Act to: identify critical infrastructure assets across 11 industry sectors (increased from the current 4 sectors); establish positive security obligations for critical infrastructure assets, including to adopt and maintain a critical infrastructure risk management program (to be delivered through sector-specific requirements) and mandatory cyber incident reporting; introduce enhanced cyber security obligations to ensure Government and industry can work collaboratively to strengthen the cyber preparedness and resilience of entities that operate assets of the highest criticality to Australia's national interests (defined as systems of national significance); and provide Government with the necessary and proportionate powers to be exercised as a last resort in circumstances where a cyber security incident has, is, or is likely to impact a critical infrastructure asset and Australia's national interest. The statutory review of the Security of Critical Infrastructure Act 2018 will analyse the operation, effectiveness and implications of the reforms introduced in the Act. As per section 60A of the Act, the review will review will: consider whether it would be appropriate to have a unified scheme that covers all infrastructure assets (including telecommunication assets) that are critical to: the social or economic stability of Australia or its people; or the defence of Australia; or national security; and review the circumstances in which any declarations have been made under Part 6 of this Act (declarations of assets by the Minister); and report the Committee’s comments and recommendations to each House of the Parliament. More information regarding the two reviews and their referral can be found at the review website. The Committee requests submissions to both reviews by Friday 12 February 2021. Submitters may wish to address both reviews in the one submission if the separation between the two scopes and interrelated elements are clearly identified in the submission. Prospective submitters are advised that any submission to the Committee’s inquiry must be prepared solely for the inquiry and should not be published prior to being accepted by the Committee. Further information about making a submission to a committee inquiry can be found at the following link. Media enquiries Chair, Mr Andrew Hastie MP (Canning, WA) 08 9534 8044 (Electorate office) 02 6277 4223 (Parliament House) For background information Committee Secretariat, Parliamentary Joint Committee on Intelligence and Security 02 6277 2360 pjcis@aph.gov.au