Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW
  • CPE

Claroty: SOCI Act Compliance: Proactive OT Security Strategy

Claroty
06/25/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


So, the whole purpose of the SOCHI Act is to put in place some controls to ensure that organisations have the right processes and the right controls in place to protect their critical infrastructure from a raft of different risks, a raft of different threats, whether that be through third party, through supply chain, but also making sure their own internal asset registries and security controls are in place and are tested on a regular basis to ensure that there is controls that can be measured. And that forms part of, obviously, the CRMP process, so working out how you apply those risk management controls into the SOCHI process as well. So, to achieve this, we have to bridge the gap between regulatory pressure and risk mitigation, so that the outcome that we want here is not a compliance outcome, it's an outcome that drives better risk resilience, better risk mitigation controls for organisations. Compliance would be addressed through the journey, but the outcome here is to create a situation where we're leveraging frameworks and we're leveraging best practice controls to not only drive the regulatory pressures that we have, but also to make sure that our overall security posture and our overall risk process, risk mitigation, is controlled through those best practices. So we're trying to really transform high-level regulatory pressures into ways and controls and measurements where we can get better operational resiliency, we can ensure better uptime for our key operational assets, we can ensure we have human safety for both our staff, but also potentially our consumer, our end user, depending on what industry we work in, but the ultimate goal also is to improve our ROI, so if we can take some of those best practices and apply those controls to ensure that we're getting resiliency, uptime and safety, the outcome financially and the benefit financially for us should be an increase or a return on investment that we can measure through the journey.

TL;DR

  • Australia's SOCI Act drives organizations to adopt proactive cybersecurity by requiring documented processes, asset registries, and regularly tested security controls for critical infrastructure protection.
  • Compliance should be viewed as a journey toward operational resilience rather than a checkbox exercise, with controls integrated into broader Critical Risk Management Programs (CRMP).
  • The framework aims to deliver measurable business outcomes including improved uptime, enhanced safety for staff and consumers, and demonstrable return on investment through best practice implementation.

Summary

This excerpt features Claroty Field CTO Jason Pearce discussing how Australia's Security of Critical Infrastructure (SOCI) Act serves as a catalyst for organizations to shift from reactive to proactive cybersecurity approaches. Pearce explains that SOCI compliance requires organizations to establish robust processes and controls to protect critical infrastructure from various threats, including third-party and supply chain risks. The framework mandates maintaining accurate asset registries, implementing regularly tested security controls, and integrating these measures into Critical Risk Management Programs (CRMP). Rather than treating SOCI as a pure compliance exercise, Pearce emphasizes that the ultimate goal is achieving better operational resilience, improved uptime for critical assets, enhanced human safety for staff and consumers, and measurable return on investment through the application of best practice security controls.

Chapters

0:00 - SOCI as Security Catalyst
0:08 - SOCI Act Requirements
0:52 - Beyond Compliance Mindset
1:29 - Operational Resilience Outcomes

Key Quotes

0:00 "SOCHI is actually the catalyst to reset your IT security from reactive to proactive."
0:52 "The outcome that we want here is not a compliance outcome, it's an outcome that drives better risk resilience, better risk mitigation controls for organisations."
1:51 "The ultimate goal also is to improve our ROI, so if we can take some of those best practices and apply those controls to ensure that we're getting resiliency, uptime and safety, the outcome financially and the benefit financially for us should be an increase or a return on investment that we can measure through the journey."

FAQ

What is the primary purpose of Australia's SOCI Act?

The SOCI Act establishes controls to ensure organizations have appropriate processes and security measures in place to protect critical infrastructure from various threats, including third-party and supply chain risks, while requiring regular testing and measurement of these controls.


Categories:
  • » Data Protection
Channels:
News:
Events:
Tags:
  • OT
  • IoT Security
  • Compliance & Governance
  • Best Practices
  • Executive Briefing
  • SOCI Act compliance
  • Critical infrastructure protection
  • Operational technology security
  • Risk management frameworks
  • Asset inventory management
  • Security control testing
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Claroty: SOCI Act Compliance: Proactive OT Security Strategy

              View CPE Certificates

              Upcoming 360 View Events

              • Nov
                19

                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

                11/19/202601:00 PM ET
                More events

                XStreaminars (watch here)

                • Nov
                  12

                  Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision

                  11/12/202601:00 PM ET
                  More events

                  Industry Events (Sponsor Hosted)

                  • Nov
                    12

                    Hands-On Workshop: Connecting On-Prem Data to Databricks Using MinIO AIStor (Americas)

                    11/12/202601:00 PM ET
                    • Nov
                      18

                      Practical Session: Connecting On-Prem Data to Databricks via MinIO AIStor

                      11/18/202608:00 AM ET
                      • Nov
                        19

                        Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

                        11/19/202601:00 PM ET
                        • Nov
                          19

                          A Deep Dive into Muse, Dots, and Duet's Impact on Your Website

                          11/19/202601:00 PM ET
                          • Dec
                            03

                            CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era

                            12/03/202601:00 PM ET
                            More events

                            Upcoming Webinar Calendar

                            • 11/12/2026
                              01:00 PM
                              11/12/2026
                              Leaving VMware Means Leaving vSAN: Your VMware Exit Is Really a Storage Decision
                              https://www.truthinit.com/index.php/channel/2192/leaving-vmware-means-leaving-vsan-your-vmware-exit-is-really-a-storage-decision/
                            • 11/12/2026
                              01:00 PM
                              11/12/2026
                              Hands-On Workshop: Connecting On-Prem Data to Databricks Using MinIO AIStor (Americas)
                              https://www.truthinit.com/index.php/channel/2202/hands-on-workshop-connecting-on-prem-data-to-databricks-using-minio-aistor-americas/
                            • 11/18/2026
                              08:00 AM
                              11/18/2026
                              Practical Session: Connecting On-Prem Data to Databricks via MinIO AIStor
                              https://www.truthinit.com/index.php/channel/2194/practical-session-connecting-on-prem-data-to-databricks-via-minio-aistor/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection
                              https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                              https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                            • 11/19/2026
                              01:00 PM
                              11/19/2026
                              A Deep Dive into Muse, Dots, and Duet's Impact on Your Website
                              https://www.truthinit.com/index.php/channel/2228/a-deep-dive-into-muse-dots-and-duets-impact-on-your-website/
                            • 12/03/2026
                              01:00 PM
                              12/03/2026
                              CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era
                              https://www.truthinit.com/index.php/channel/2231/ciso-insights-steering-cybersecurity-strategies-in-an-ai-driven-era/
                            • 01/19/2027
                              02:00 PM
                              01/19/2027
                              HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.
                              https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
                            • 03/18/2027
                              01:00 PM
                              03/18/2027
                              Securing Access for People, Partners and AI Agents
                              https://www.truthinit.com/index.php/channel/2251/securing-access-for-people-partners-and-ai-agents/
                            • 06/17/2027
                              01:00 PM
                              06/17/2027
                              Stop the Leak: Data Loss Prevention for the AI Era
                              https://www.truthinit.com/index.php/channel/955/360view-stop-the-leak-data-loss-prevention-for-the-ai-era/
                            • 08/19/2027
                              01:00 PM
                              08/19/2027
                              Who Has Access to What...and Should They?
                              https://www.truthinit.com/index.php/channel/2252/who-has-access-to-what-and-should-they/
                            • 10/21/2027
                              01:00 PM
                              10/21/2027
                              After VMware: Building the Private Cloud You Actually Want
                              https://www.truthinit.com/index.php/channel/2253/after-vmware-building-the-private-cloud-you-actually-want/
                            • 11/18/2027
                              01:00 PM
                              11/18/2027
                              Assume Breach, Prove Recovery
                              https://www.truthinit.com/index.php/channel/2254/assume-breach-prove-recovery/
                            • 12/16/2027
                              01:00 PM
                              12/16/2027
                              The Self-Running Service Desk
                              https://www.truthinit.com/index.php/channel/2255/the-self-running-service-desk/
                            Truth in IT
                            • Sponsor
                            • About Us
                            • Terms of Service
                            • Privacy Policy
                            • Contact Us
                            • Preference Management
                            Desktop version
                            Standard version