About us

SOCI Act Compliance is a reference site for the people who have to make the Security of Critical Infrastructure Act 2018 work inside an organisation: compliance and risk managers, in-house lawyers, procurement teams, the executives and directors who approve annual reports, and the suppliers who answer their questions. It does two things. It explains the obligations in plain English, tying each statement to the Act, the CIRMP Rules or guidance from the Cyber and Infrastructure Security Centre and the Department of Home Affairs. And it keeps a register of firms that offer SOCI Act and CIRMP services, so readers can see who does what.

The site is written by the SOCI Act Compliance editors. Pages show the date they were last reviewed, and guidance notes are checked against the current compilation on the Federal Register of Legislation when the law changes. Nothing here is legal advice. For advice on a particular asset, speak to a lawyer or contact the Cyber and Infrastructure Security Centre.

How providers are selected

A firm is listed only if its own website has a page describing SOCI Act or CIRMP services, or SOCI work it has done, and that page was available when checked on 14 November 2026. Each entry uses facts from that page and the firm's contact or home page: where it is based, the services it names and who it says the work is for. Founding years, prices, client names and awards are left out unless the firm's own page states them, and no entry contains reviews or ratings.

Firms were left out where their SOCI page named no specific services, gave no location or described rules that have since been replaced. Entry order is not a ranking. The register is rechecked when the SOCI Act or CIRMP Rules change. To correct an entry, email hello@sociactcompliance.site.