From data to defence: Using OSINT to build resilience across critical infrastructure supply chains

In 2018, the Australian Government enacted the Security of Critical Infrastructure Act 2018 (SOCI Act) to safeguard the country's vital assets. By December 2021, the SOCI Act encompassed 22 classes of assets spanning 11 sectors within Australia's economy. Central to this legislative framework are Positive Security Obligations (PSOs), mandating critical infrastructure organisations implement and uphold a Critical Infrastructure Risk Management Program (CIRMP). The Australian Government’s Cyber and Infrastructure Security Centre (CISC) has stipulated that CIRMP’s should address threats and vulnerabilities associated with cyber and information security, personnel, physical security, natural hazards, and supply chains.

Given the complex landscape of critical infrastructure operators across Australia and the varied security challenges they face, securing our collective critical infrastructure demands a comprehensive range of tools and technologies. In our talk we will delve into the realm of OSINT tools and methodologies, showcasing their pivotal role in bolstering the resilience of CIRMPs. With a focus on technology supply chain integrity and transparency, we'll illuminate how OSINT can serve as a strategic ally for critical infrastructure operators, fortifying their defenses and ensuring robustness in the face of dynamic and evolving threats.