Part 2A of the Security of Critical Infrastructure Act 2018 (SOCI Act) requires Responsible Entities for critical infrastructure assets to have and comply with a Risk Management Program (RMP). Responsible Entities must submit an Annual Report relating to its RMP to the relevant Regulator within 90 days of the end of the relevant Australian financial year. The Annual Report must be approved by the Entity’s board, council or other governing body, and must be submitted using this form.
This form must be completed within 90 days after the end of each financial year. It is recommended that you make a copy of this form for your records.
If you need more information, email cisc@homeaffairs.gov.au.
