All regulations & standards
Asia-Pacific · Regulation & standard

AU SOCI Act scenario testing with simulations

What is AU SOCI Act?

Australia’s Security of Critical Infrastructure Act sets positive security obligations for critical infrastructure assets, including a risk management program that must be maintained and tested.

iluminr simulations let teams rehearse the decisions AU SOCI Act cares about against severe-but-plausible scenarios, and keep a record of who decided what, and when. Run them as Microsimulations, full-scale simulations, or facilitated by our team of experts.

Build a 12-month AU SOCI Act programOpen in the catalogue

Simulations mapped to AU SOCI Act

Emergency vehicle at a site under threat, illustrating the A Dark Day: Bomb Threat MicrosimulationPhysical SecurityA Dark Day: Bomb ThreatAn anonymous caller threatens the safety of colleagues at a key site location with the imminent detonation of a bomb. Strategic response teams must move through critical decisions regarding the threat to delineate roles, responsibilities and delegated authorities in alignment with emergency response teams and stakeholders.Smoke from a building fire, illustrating the Access Denied: Building Fire MicrosimulationPhysical SecurityAccess Denied: Building FireNavigate a building fire by ensuring employee safety, coordinating with emergency services, communicating with stakeholders, and planning for alternative business locations due to site inaccessibility.Lightning storm over a city, illustrating the Claims Surge: Severe Weather MicrosimulationNatural Hazards & ClimateClaims Surge: Severe WeatherProlonged severe weather drives widespread power outages, sparking a surge of storm-related claims that overwhelm triage teams and push systems beyond capacity. Respond to compounding severe but plausible event causing significant impacts to a critical operation.Lightning storm over a city, illustrating the Connectivity Down: Severe Weather MicrosimulationThird-Party & TechnologyConnectivity Down: Severe WeatherRespond to severe weather-induced operational disruptions, including widespread internet outages, by verifying role responsibilities and ensuring continuity in communications and operations.Data center servers in the dark, illustrating the Core Platform Outage: Rollback MicrosimulationThird-Party & TechnologyCore Platform Outage: RollbackA critical platform update turns into a live-fire incident as a scheduled patch unexpectedly brings down key systems. Participants must navigate real-time service degradation, mounting customer pressure, and rollback decisions under duress. This Microsimulation tests cross-functional coordination, incident escalation, and communication flow - providing vital validation of operational resilience, rollback protocols, and regulatory compliance readiness.Storm system seen from above, illustrating the Crisis Mode: Natural Disaster MicrosimulationNatural Hazards & ClimateCrisis Mode: Natural DisasterActivate a multi-team response to a natural disaster impacting your infrastructure and staff safety, focusing on communication protocols and validating roles in essential service delivery.A broken chain, illustrating the Exit Plan: Vendor Insolvency MicrosimulationThird-Party & TechnologyExit Plan: Vendor InsolvencyA critical third-party vendor has filed for insolvency, causing both operational and data losses. Can your team execute the exit plan under pressure?Flooded city at night, illustrating the Flooded Future: Climate Reckoning MicrosimulationNatural Hazards & ClimateFlooded Future: Climate ReckoningNavigate the chaos of a climate disaster resulting in major flooding, and the aftermath of public scrutiny. Safeguard operations, protect staff, and build resilience under the spotlight of regulatory oversight.Power lines in extreme heat, illustrating the Heatwave Havoc: Grid Collapse MicrosimulationNatural Hazards & ClimateHeatwave Havoc: Grid CollapseManage a complete multi-site grid collapse triggered by an intense heatwave, focusing on stakeholder communication and implementing contingency plans across multiple affected locations.Military activity at night, illustrating the On the Brink: Curbing Conflict MicrosimulationGeopoliticalOn the Brink: Curbing ConflictNavigate the challenges posed by escalating tensions between economic powers, focusing on managing disrupted supply chains and validating critical response strategies.Lightning storm over a city, illustrating the Power Outage: Localized Weather Crisis MicrosimulationNatural Hazards & ClimatePower Outage: Localized Weather CrisisManage prolonged power outages caused by severe weather, focusing on stakeholder communication and implementing contingency plans for the affected area.Ripples spreading across dark water, illustrating the Ripple Effect: Fourth-Party Fallout MicrosimulationThird-Party & TechnologyRipple Effect: Fourth-Party FalloutA critical system failure has occurred in your supply chain, creating significant operational impacts. Your third-party vendor experienced a service outage caused by a vulnerability introduced through an undetected AI-driven update in their supplier's systems. This failure has cascaded through your supplier's network, resulting in widespread service disruptions that are now affecting your business operations and customers.Emergency lights at night, illustrating the Shooter Threat: Event Cancellation MicrosimulationPhysical SecurityShooter Threat: Event CancellationAn active shooter crisis unfolds at a major city stadium just hours before a high-profile sporting event. Participants must address the immediate physical security threat while also evaluating the potential need for event cancellation. This involves balancing the safety of attendees and staff against the financial implications of activating event cancellation insuranceData center servers in the dark, illustrating the Sustained Power Outage: DC Shutdown MicrosimulationNatural Hazards & ClimateSustained Power Outage: DC ShutdownA catastrophic heatwave leads to widespread grid failure, forcing organizations to consider drastic action: a controlled shutdown of their primary data center. This Microsimulation tests tactical preparedness, technical decision-making, and procedural clarity under constrained, real-time conditions. Ideal for stress-testing your organization’s ability to respond, coordinate, and protect data when the lights go out.Shipping containers at a port, illustrating the Trapped: Vendor Modern Slavery MicrosimulationThird-Party & TechnologyTrapped: Vendor Modern SlaveryNavigate the ethical, legal, and operational challenges posed by a tech supplier embroiled in a modern slavery scandal, focusing on incident assessment and communication strategies.Data center servers in the dark, illustrating the Vendor Outage: System Down MicrosimulationThird-Party & TechnologyVendor Outage: System DownRespond to a critical vendor cyber-attack that has disrupted essential services, focusing on business impact assessment, data review, and immediate contingency actions.Emergency lights at night, illustrating the VIP Down: Severe Illness MicrosimulationPhysical SecurityVIP Down: Severe IllnessAn executive is found to be severely ill while travelling to one of the company's offshore locations. This microsimulation exercises decision models and response protocols for dealing with the safety and potential repatriation of a VIP in an offshore location.Protest crowd at night, illustrating the Disruption: Event Chaos MicrosimulationPhysical SecurityDisruption: Event ChaosManage an increasingly violent protest near a major conference, ensuring team safety, stakeholder communication, and preparedness for escalating risks.Emergency lights at night, illustrating the High Security: Active Shooter MicrosimulationPhysical SecurityHigh Security: Active ShooterHandle an active shooter incident near your organization by maintaining situational awareness, securing employee safety, and managing communications.Emergency lights at night, illustrating the Intercepted: International Security Threat MicrosimulationPhysical SecurityIntercepted: International Security ThreatA high-stakes security incident involving the violent interception of a corporate executive team's convoy during transit between office locations. The simulation aims to evaluate organizational readiness, response protocols, and decision-making processes during an international physical security crisis.Military activity at night, illustrating the MIA: Global Tensions MicrosimulationGeopoliticalMIA: Global TensionsRising geopolitical tension leaves colleagues unaccounted for overseas. Assess the incident, manage stakeholders and escalation, and confirm your team can reach the communication templates and tools it needs.Earthquake damage, illustrating the Seismic Shift: Earthquake Response MicrosimulationNatural Hazards & ClimateSeismic Shift: Earthquake ResponseThis Microsimulation focusses on reviewing and validating response plans and critical functions, strengthening cross-functional collaboration and alignment, and verifying communication protocols to ensure clarity and consistency during a crisis.

Mapping is indicative. Confirm scope against your own obligations.

Frequently asked questions

What is AU SOCI Act?

Australia’s Security of Critical Infrastructure Act sets positive security obligations for critical infrastructure assets, including a risk management program that must be maintained and tested.

How do simulations help with AU SOCI Act?

Simulations let teams rehearse the decisions AU SOCI Act cares about against severe-but-plausible scenarios. iluminr keeps a record of who decided what, and when, which you can use as evidence of testing.

Which iluminr simulations map to AU SOCI Act?

Simulations mapped to AU SOCI Act include A Dark Day: Bomb Threat, Access Denied: Building Fire, Claims Surge: Severe Weather, Connectivity Down: Severe Weather, Core Platform Outage: Rollback and Crisis Mode: Natural Disaster, among others.

Who should take part?

These simulations are most often run with Executive & Board, Operations, Crisis Management and People & HR.

Can I build a 12-month AU SOCI Act testing program?

Yes. The iluminr program builder suggests a 12-month plan of simulations for AU SOCI Act. You can add or remove scenarios and export the plan as a PDF for your board.

Can we customize these simulations?

Yes. Run any template as is, tailor the roles, plans, critical services and injects to your organization, or build your own from scratch with the iluminr builder.

Is this mapping legal or compliance advice?

No. The mapping between simulations and AU SOCI Act is indicative. Confirm scope against your own obligations.

More in Asia-Pacific