Veteran cybersecurity academic Dr Jill Slay has been appointed by the federal government to lead an independent review of Australia’s critical infrastructure laws.
The review — the first since the Security of Critical Infrastructure (SOCI) Act was introduced in 2018 — comes a year after the country’s first standalone Cybersecurity Act passed into law.
The Cybersecurity Act resulted in significant changes to the SOCI Act, which regulates assets like hospitals, banks and data centres, in the wake of high-profile cyber-attacks against companies like Optus and Medibank.
Under the reforms, more data storage systems now count as critical infrastructure, telcos face tougher security standards and a wider range of serious incidents must be reported.
As part of changes to the Act secured by the powerful Parliamentary Joint Committee on Intelligence and Security, the government was required to begin an intendent review into SOCI by no later than 1 November 2025.
SOCI has not undergone an independent review since it was first introduced in 2018, but there have been a series of PJCIS reviews corresponding with legislative changes in 2021, 2022 and 2024.
The Department of Home Affairs’ Critical Infrastructure Security Centre (CISC) last week announced Dr Slay to understand whether it is operating as intended and “identify any gaps or amendments” that may be needed.
“This important piece of work will provide a strong evidence base to inform future legislative reform and enhance the protection of critical infrastructure in Australia,” it said.
Dr Slay is well known for her research into digital forensics, cyber intelligence and cyberwarfare, and is currently researching satellite cybersecurity in her capacity as SmartSat professional chair in cybersecurity at the University of South Australia.
Announcing her appointment, the CISC said Dr Slay brings a “wealth of experience to the role”, given her previous work with both federal and state governments, industry and academia.
Do you know more? Contact James Riley via Email.