What Part 7A It Means for Critical Infrastructure Organisations
Victoria’s Emergency Management Act 2013 (Vic) goes beyond emergency response.
Part 7A sets up a system to identify, regulate, and strengthen Vital Critical Infrastructure (VCI). This helps ensure the essential services Victorians depend on continue to operate during disruptions.
Part 7A sets up a system to identify, regulate, and strengthen Vital Critical Infrastructure (VCI). This helps ensure the essential services Victorians depend on continue to operate during disruptions.
The main goal is to keep supplies flowing—such as electricity, fuel, freight, and food—even during major emergencies.
For organisations that run critical assets, Part 7A is both a legal requirement and a chance to build real operational resilience.
What Is Vital Critical Infrastructure (VCI)?
Under Part 7A, the Victorian Government may designate infrastructure as Vital Critical Infrastructure where its disruption would significantly impact:
- Public safety and wellbeing
- The state’s economy
- Essential goods and services
- Other interconnected infrastructure systems
VCI status means some assets are so critical that their failure could disrupt multiple sectors.
The Victorian Critical Infrastructure Register (VCIR)
Part 7A requires that identified infrastructure is listed on the Victorian Critical Infrastructure Register, which is a central place for key information about these assets.
This helps government and emergency agencies to:
- Understand infrastructure interdependencies
- Prioritise response and recovery actions
- Coordinate across sectors during crises.
- Maintain situational awareness of essential services.
Resilient Services helps organisations make sure their infrastructure is properly listed and meets the register’s requirements.
The Mandatory Resilience Improvement Cycle
Organisations listed as VCI must follow a Resilience Improvement Cycle. This ongoing process shows they can handle, respond to, and recover from disruptions.
Key Requirements Include:
Resilience Plan
A practical, operational plan outlining how critical services will continue during disruption, including:
- Continuity strategies
- Incident response coordination
- Recovery timeframes
- Stakeholder engagement
- Restoration of essential functions
Risk Management Plan
A detailed assessment identifying risks to infrastructure and supply continuity, including:
- Hazard and threat analysis
- Infrastructure vulnerabilities
- Supply chain dependencies
- Mitigation strategies and controls
- Governance and accountability frameworks
These documents are not set in stone. They need to be reviewed, tested, and improved regularly.
Industries Commonly Captured Under Part 7A
The government decides which assets are included, but Part 7A usually covers industries that keep Victoria running every day.
Energy & Utilities
- Electricity generation, transmission and distribution
- Gas supply networks
- Energy storage infrastructure
If disrupted, these services can quickly cause failures in all other sectors.
Fuel Supply Chains
- Fuel import terminals and storage facilities
- Distribution networks supporting transport and emergency services
If disrupted, it limits logistics, emergency response, and economic activity.
Transport, Freight & Logistics
- Ports, rail freight and major distribution hubs
- Intermodal and large-scale logistics centres
If disrupted, it disrupts supply chains, exports, and supermarket availability.
Food Production & Distribution
- Major processors and cold storage operators
- Agricultural supply and wholesale distribution networks
If disrupted, it threatens food security and the stability of communities.
Water & Essential Services
- Water treatment and distribution systems
- Wastewater and sanitation infrastructure
If disrupted, there are direct consequences for public health.
Enabling Infrastructure & Critical Suppliers
- ICT systems supporting infrastructure operations
- Specialist service providers embedded in critical supply chains
If disrupted, hidden dependencies can shut down the main infrastructure.
What a “Part 7A Audit” Really Assesses
While these activities are not always called traditional audits, Part 7A checks whether organisations can show real resilience, including:ing:
- A compliant and operational Resilience Plan
- Integrated Risk Management aligned to infrastructure threats.
- Executive-level oversight and governance
- Understanding of interdependencies and critical functions
- Tested response and recovery arrangements
- Evidence of continuous improvement
It is about proving resilience is embedded—not theoretical.
Moving From Compliance to Capability
Part 7A reflects a broader shift in emergency management:
Instead of just reacting to incidents, the focus is now on designing systems that keep working even when problems happen.
Organisations that see Part 7A as a way to build resilience, not just a compliance task, benefit by gaining:
- Stronger operational continuity
- Reduced downtime and disruption risk
- Clearer executive visibility of infrastructure risk
- Alignment with national critical infrastructure expectations
- Greater stakeholder and regulatory confidence
How Resilient Services Supports Part 7A Compliance
Resilient Services works with infrastructure owners and operators across Victoria to turn legal requirements into practical results.
We assist with:
- Determining whether assets fall within the VCI scope
- Preparing submissions aligned to the Victorian Critical Infrastructure Register
- Developing Resilience and Risk Management Plans
- Mapping dependencies and critical functions
- Facilitating resilience workshops and scenario exercises
- Validating plans through testing and After Action Reviews
- Embedding continuous improvement across operations
We focus on making sure organisations are not only compliant, but also ready to operate during disruptions.
Strengthen Your Infrastructure Resilience
If your organisation works in energy, transport, logistics, utilities, fuel, or food supply, Part 7A will likely affect your regulations now or soon.
Resilient Services helps critical infrastructure organisations meet Part 7A obligations with clarity, confidence and practical resilience outcomes.
Speak with our team to ensure your organisation is prepared, compliant, and able to maintain essential services in the event of disruption.