SOCI Act Explained: Compliance Rules & Requirements | UpGuard

### Executive summary: The document is an explanatory blog post on Australia’s Security of Critical Infrastructure (SOCI) Act, summarizing its core obligations (Positive Security Obligations, mandatory 12-hour incident reporting, risk management and CIRMP requirements), key amendments from 2021–2023 (expanded scope, enhanced oversight, supply chain and personnel controls), annual reporting expectations, and guidance for compliance — concluding with a product recommendation (UpGuard BreachSight) to help organizations manage external attack surface and meet SOCI obligations.