Australia: Cyber Security Centre and Cybersecurity alongside international partners issued principles for secure integration of AI in operational technology

Description

Cyber Security Centre and Cybersecurity alongside international partners issued principles for secure integration of AI in operational technology

On 4 December 2025, the Australian Cyber Security Centre (ACSC) and the Cybersecurity and Infrastructure Security Agency (CISA) adopted principles for the secure integration of artificial intelligence (AI) in operational technology. The principles provide guidance to critical infrastructure operators regarding the integration of AI into operational technology (OT) environments. Specific principles include understanding the unique risks of AI and their potential impact on OT, considering the use of AI in the OT domain, and establishing AI governance and assurance frameworks. The principles are produced in collaboration with a number of other national agencies, including the National Security Agency’s Artificial Intelligence Security Center (NSA AISC), the Federal Bureau of Investigation (FBI), the Canadian Centre for Cyber Security (Cyber Centre), the German Federal Office for Information Security (BSI), the Netherlands National Cyber Security Centre (NCSC-NL), the New Zealand National Cyber Security Centre (NCSC-NZ), and the United Kingdom National Cyber Security Centre (NCSC-UK).

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services, ML and AI development, infrastructure provider: cloud computing, storage and databases, infrastructure provider: network hardware and equipment, infrastructure provider: other
Implementation Level
supranational
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2025-12-04
adopted

On 4 December 2025, the Australian Cyber Security Centre (ACSC) and the Cybersecurity and Infrastru…