Ep 161 - From Compliance to Resilience: SOCI Reforms in an AI-Driven Threat Landscape
ASIAL Security InsiderShow Notes
Australia’s critical infrastructure operators are entering a new phase of security and risk management. With enhanced obligations under the Security of Critical Infrastructure (SOCI) Act, rapidly advancing artificial intelligence, and growing supply chain vulnerabilities, organisations must rethink how they identify, manage, and respond to emerging threats.
In this episode of the Security Insider podcast, Dr Maher Magrabi, Director of Security, Cybersecurity & Risk at Lote Consulting Pty Ltd, discusses the changing landscape in “From Compliance to Resilience: SOCI Reforms in an AI-Driven Threat Landscape.”
The conversation explores the purpose of the SOCI Act, what the 2026 Critical Infrastructure Risk Management Program (CIRMP) reforms mean for regulated entities, how AI is transforming both cyber threats and defensive capabilities, and why supply chain resilience has become a critical priority for security leaders.
Whether you’re responsible for security, cybersecurity, risk, governance, compliance, or executive leadership, this episode provides valuable context for understanding Australia’s evolving critical infrastructure obligations and the practical steps organisations should be taking today.
In this episode: The original purpose of the SOCI Act What changed under the 2026 CIRMP reforms How AI is reshaping the threat landscape Why supply chain risk is becoming a major security challenge Practical advice for security and risk leaders A preview of Dr Magrabi’s presentation at the Security Expo and Conference
Listen now for an insightful discussion on moving beyond compliance and building genuine resilience in an increasingly complex threat environment.
To hear Dr Magrabi present live, book tickets for the Security Conference running from September 2-3 at the ICC in Sydney at securityexpo.com.au
More from ASIAL Security Insider
A new and disturbing form of violent extremism is spreading across online communities, and unlike traditional extremist movements, it isn't necessarily driven by politics, religion or ideology. Instead, it's fuelled by manipulation, psychological exploitation, cruelty and the pursuit of notoriety.
Cybersecurity professionals spend enormous amounts of time and money building sophisticated systems designed to keep attackers out. But attackers do not always need to defeat the technology. Sometimes, they simply need to convince a person to open the door.
In Part One, we explored the key findings from ASIAL’s landmark Security 2030 report, discussing regulatory reform, procurement challenges, industry visibility and the structural issues that must be addressed if the sector is to meet the demands of the future.
Australia’s private security industry is entering a period of significant change. New technologies, evolving threats, workforce challenges, regulatory reform and increasing expectations around professionalisation are reshaping what security will look like over the next five years.
Crowded public spaces present a unique security challenge. They must remain safe and resilient while also feeling open, welcoming and accessible.