At Resilient Services, we bring our extensive expertise to work with organisations responsible for the infrastructure that keeps Australia running—ensuring power stays on, ports remain open, roads are passable, and essential goods like food and fuel remain available. Our team has a deep understanding of the complex and evolving legislative framework governing Australia’s critical infrastructure, and we are well-versed in the dual obligations under both Part 7A of the Emergency Management Act 2013 (Vic) and the Security of Critical Infrastructure (SOCI) Act 2018 (Cth).
All major and significant critical infrastructure in Victoria must be listed on the Victorian Critical Infrastructure Register.
Australia’s critical infrastructure is governed by a complex and evolving legislative framework, and in Victoria, many organisations are now subject to both state and federal requirements. It’s essential to understand where your organisation fits.
Under Part 7A, the Victorian Government identifies and regulates Vital Critical Infrastructure (VCI). The primary objective is to ensure continuity of supply—ensuring critical services, such as electricity, fuel, transportation, and food, remain operational during emergencies.
Part 7A of the Emergency Management Act 2013 (Vic) takes emergency preparedness a step further in Victoria, and Resilient Services is your partner in compliance and excellence. Our team ensures that your major critical infrastructure in Victoria is seamlessly included on the Victorian Critical Infrastructure Register, creating a centralised repository for essential information.
Organisations listed as VCI must complete a Resilience Improvement Cycle, which includes a mandatory Resilience Plan and Risk Management Plan, to demonstrate their ability to withstand and recover from disruptions.
In Australia, this legislation designates and safeguards infrastructure deemed essential to the state’s operations. Our experts at Resilient Services can guide you through the classification process and ensure your compliance with the government’s requirements, ensuring that your critical assets and data subject to SOCI are comprehensively protected and compliant.
The Commonwealth SOCI Act casts a wider net, recognising the growing importance of data, cybersecurity, and supply chain integrity. The Act has expanded its scope beyond traditional infrastructure to include:
Organisations under the SOCI framework may be required to report cyber incidents, undertake risk management programs, and participate in enhanced regulatory oversight, depending on their designated sector and asset class.
Many Victorian organisations now fall under both Part 7A of the EM Act and the SOCI Act. This dual responsibility creates unique compliance challenges that must be addressed strategically and holistically.
Resilient Services provides comprehensive support to clients who fall under both Part 7A of the EM Act and the SOCI Act. We identify overlaps, clarify obligations, and develop a unified approach to critical infrastructure protection that aligns with both jurisdictions, ensuring all your compliance needs are met.
Understanding the distinctions between the SOCI Act and Part 7A of the Emergency Management Act is vital, and Resilient Services is here to assist you every step of the way. Our expertise can help you navigate the complex compliance landscape and enhance your emergency management and resilience planning.
We partner with state and federally regulated entities to assess, strengthen, and document their resilience.
We conduct comprehensive desktop audits and gap analyses to assess alignment with the following:
Our process highlights vulnerabilities and identifies where controls can be strengthened to ensure full legislative compliance and real-world resilience.
We help you develop and refine key documents, including:
These plans are aligned to your organisation’s assets, sector requirements, and broader business continuity strategies.
With the SOCI Act’s increased focus on data and cyber resilience, our team can help you assess and mitigate vulnerabilities related to:
We ensure you are prepared for incident reporting obligations and equipped to handle real-time cyber threats.
If your organisation is listed as Vital Critical Infrastructure in Victoria, there’s a strong chance you’re also subject to the SOCI Act. Whether you’re at the start of your compliance journey or refining your existing strategies, Resilient Services can help you stay ahead of your obligations—and prepared for disruption.
Contact us today to book a consultation or to learn more about our critical infrastructure support services.
Complete the form below or call 0493 700 661 to find out how our Critical Infrastructure Risk Management services can help you manage obligations under the SOCI Act and Victoria’s Emergency Management regulations while strengthening resilience.
"*" indicates required fields
Geelong Port.
General Manager for Health, Safety, Environment, & Quality
Top 4 Australian
Accounting Firm 2021