Australia’s Security of Critical Infrastructure Act was expanded in 2021 to cover 22 asset classes across 11 sectors, requiring operators to manage risks from sabotage, espionage, and coercion. Entities must adopt a Critical Infrastructure Risk Management Program and comply with ISO 27001 or equivalent standards, with heavy penalties for non-compliance. Convergence of IT and OT networks increases vulnerabilities, especially in ICS environments. CyberArk’s Identity Security Platform helps organizations meet these requirements by enforcing least privilege, securing privileged accounts, isolating and monitoring sessions, managing secrets, and providing audit trails. This strengthens compliance, reduces risks, and protects critical assets.

Join for free to read