Operational industry

Critical Infrastructure

SOCI Act-aligned OT/ICS cybersecurity for energy, water, telecommunications, transport and data-storage operators.

SOCI-aligned critical infrastructure cyber security across IT and OT.

Under the SOCI Act, responsible entities in 11 critical infrastructure sectors have legal cyber security duties. These include Risk Management Programs and enhanced reporting. Systems of National Significance must engage with the ACSC. We design and run cyber programs that bridge IT and OT without changing how the plant works. OT monitoring is passive by default. Our SOC is sovereign. Our methods align to the CIRMP Rules, the NIST CSF and IEC 62443.

Critical Infrastructure
12 hrs
To report a critical cyber incident (SOCI Act)
6
Frameworks we map to for this sector
IRAP
ASD-endorsed assessors
2001
Operating in Australia

Cyber threats targeting Australian critical infrastructure.

OT/ICS-targeted malware

State-aligned actors have used Industroyer, TRITON and INDUSTROYER2-class tools against nearby countries.

IT-to-OT lateral movement

Ransomware pivoting from corporate AD into historian, engineering workstations and DMZ-exposed HMIs.

Supply chain and vendor remote access

OEM and integrator remote-support channels used as persistent backdoors into Purdue Level 2 and below.

Data exfiltration under SOCI

Targeted theft of operational data protected under the SOCI Act, including network diagrams and SCADA configs.

SOCI Act and CIRMP obligations we align to.

  • SOCI Act (Security of Critical Infrastructure Act 2018)

  • CIRMP Rules (Critical Infrastructure Risk Management Program)

  • Systems of National Significance (SoNS) obligations

  • NIST Cybersecurity Framework

  • IEC 62443 (Industrial automation and control systems security)

  • AEMO AESCSF (Australian Energy Sector Cyber Security Framework)

How responsible entities engage Vectra for OT security.

OT-Aware Managed XDR

IT + OT telemetry correlated by analysts who understand Purdue models.

OT Penetration Testing

Safe, passive-first testing of SCADA, HMI and historian layers.

Essential 8 + IEC 62443

Dual-framework uplift that maps both IT and OT controls.

Incident Response Retainer

SoNS-grade response with ACSC notification support.

Virtual CISO

Fractional leadership that can speak to both engineering and executive.

Red Team Operations

IT-to-OT traversal testing under strict safety boundaries.

Critical infrastructure outcomes ready for ACSC scrutiny.

  • CIRMP documentation and evidence ready for Home Affairs annual attestation

  • Continuous passive OT visibility without any change to control-network topology

  • Clear IT-to-OT segmentation, checked against IEC 62443 zones and conduits

  • SoNS-aligned incident response pre-exercised with ACSC liaison channels established

  • Executive reporting framed around public-safety outcomes, not asset counts

Questions CI customers ask first.

Will you actively probe our control network?

No. OT monitoring defaults to passive SPAN/TAP-based collection. Active scanning requires written engineering approval, a tested maintenance window and a rollback plan.

Can you map controls across IT and OT at once?

Yes. We run Essential Eight and IEC 62443 assessments in parallel. IT and OT control uplift tracks on one plan, not two.

Do you support AEMO AESCSF self-assessment?

Yes. We run the AESCSF assessment and produce the MIL-level evidence pack that energy market participants submit annually to AEMO.

What if we're a SoNS?

We run the extended SoNS cyber-security obligations engagement, covering enhanced reporting, information-gathering directions and ACSC engagement, and pre-populate templates for Home Affairs submissions.

Start with a conversation.

Speak to us about your cyber governance and compliance requirements.

Send us a message

What can we help with?

A sentence or two is plenty. We'll ask for detail when we reply.