The Independent Review of the Security of Critical Infrastructure Act 2018 is the clearest policy signal Australia has produced on cyber threat intelligence sharing. CI-ISAC Australia (CI-ISAC) sets out what it found and what should follow.
Dr Jill Slay AM's review ran across more than 600 roundtable participants.
Seventy per cent of stakeholder sentiment about the SOCI Act was negative, not about its intent but about its ability to keep pace with nation-state actors, AI-enabled attacks and supply chain compromise.
Polling across more than 460 town hall attendees showed majority support for mandatory cyber threat intelligence sharing over incentivised sharing, across all sectors.
Practitioners are focused on attestation cycles and audit readiness rather than the adversary. Legislation can mandate sharing; it cannot mandate the conviction that makes sharing useful.
Seventy per cent of stakeholder sentiment about the SOCI Act was negative, not about its intent but about its ability to keep pace with nation-state actors, AI-enabled attacks and supply chain compromise.
Polling across more than 460 town hall attendees showed majority support for mandatory cyber threat intelligence sharing over incentivised sharing, across all sectors.
Practitioners are focused on attestation cycles and audit readiness rather than the adversary. Legislation can mandate sharing; it cannot mandate the conviction that makes sharing useful.