The Security of Critical Infrastructure Act 2018 (SOCI) is a new legislation designed to safeguard the assets and systems that underpin the country’s essential services. It establishes obligations for certain asset owners and operators to identify and manage security risks, with a strong focus on cyber, physical, personnel, and supply chain threats.
The SOCI Act applies to eleven critical infrastructure sectors: communications, data storage or processing, financial services and markets, water and sewerage, energy, healthcare and medical, higher education and research, food and grocery, transport, space technology, and defence industry. Organisations operating assets in these sectors may be subject to specific obligations under the Act.
Individuals who require access to critical infrastructure assets, systems, or sensitive operational information may need a SOCI Background Check. This includes employees, contractors, and service providers. Responsible entities are to determine the roles that are designated as critical workers within their organisation.
The SOCI Act defines a critical worker as an individual whose role provides them with access to critical infrastructure assets, systems, or sensitive operational information. This includes employees, contractors, and third parties whose activities (if compromised) could present a security risk to essential services.
The SOCI framework considers a range of prohibiting offences, including but not limited to fraud, theft, terrorism, cybercrime, espionage, and links to organised crime. These offences help assess whether a person poses an unacceptable risk to the security of critical infrastructure.
A SOCI Background Check does not automatically give critical workers access to critical infrastructure.
A SOCI Background Check helps assess and individual’s suitability as a critical worker, but it does not grant access on its own. The final decision to grant access remains with the organisation, based on the individual’s role, risk profile, and internal policies.
Worker consent is managed through a transparent and secure digital process. Before any background check is conducted, individuals are informed of what data will be collected, how it will be used, and why it’s required under the SOCI Act. A formal record of consent is retained for compliance and audit purposes.
If your organisation deems you as a critical worker, they will send you an invitation via email and/or SMS to apply for a SOCI Background Check.
You’ll need the following to apply for your SOCI Background Check:
You’ll get an email or SMS invitation from your organisation to apply. The application takes about 10 minutes from start to finish. It includes:
You must provide three documents with your application form to confirm your identity:
The documentation you provide must include evidence of your full name and date of birth, and a photograph of you. The commencement and primary documents provided must include a photo of you. If your commencement and primary documents do not include a photograph you must submit a passport-style photograph certified by a person listed in Schedule 2 of the Statutory Declarations Regulations 1993 (Cth).
You will need access to a scanner or a mobile device with a camera to upload your ID documents.
You will need access to a scanner or a mobile device with a camera to upload your ID documents.
At least 1 'Commencement of Identity' document:
At least 1 ‘Primary Use in the Community’ document:
At least 1 ‘Secondary Use in the Community’ document:
Change of name: If you provide identity documents using a former name, you must provide evidence of your name change.
This means providing a change of name certificate issued by the Australian Registry of Births, Deaths and Marriages or an Australian marriage certificate issued by a state or territory, in addition to your three identity documents. Church or celebrant-issued certificates are not accepted.
Once your background check results are returned, we’ll send you a digital copy of your results report via email.
On average, 70% of SOCI Background Check Results Reports are returned in 24 hours once lodgement is received. For the remaining 30%, the Australian Criminal Intelligence Commission, the national agency responsible for conducting these checks may have reasons as to why some checks take longer than others to process, including:
For urgent needs, please contact us and we will endeavour to assist you.
Yes, you can email your documents to soci@veritasgroup.com.au.
If you don’t have a smartphone, ask a trusted family member, friend, or colleague to help you with your application. It’s best to seek assistance from someone you trust who can help you in person to upload your documents and photos.
For help with your application, ID documents, or results please contact us. You can reach out to our friendly staff by calling 1300 837 482.
Your consent is required to protect your privacy and ensure your information is handled correctly. There are three parts to the consent you provide:
A SOCI Background Check Results Report lists your Disclosable Court Outcomes (DCOs), subject to relevant spent convictions or non-disclosure legislation and information release policies.
Disclosable Court Outcomes refer to records of court convictions and findings of guilt, where applicable legislation and policies have been applied.
The type and amount of information released will depend on the category and purpose of the check, and the jurisdiction where convictions are recorded and vetted. Police agencies will apply relevant legislation and policies during the vetting process.
If you have a DCO, you will have 2 business days to review your results and either consent to release them or raise a dispute. Veritas will categorise your DCO based on your organisation’s risk management plan.
If you have a DCO, you will have 2 business days to review your results and either consent to release them or raise a dispute. Veritas will categorise your DCO based on your organisation’s risk management plan.
Once your SOCI Background Check is complete, we will send you an email with a secure link to download and review your results.
Please review your results carefully. If you have any concerns, you can raise a dispute using the ‘submit response’ link in your email within 2 business days. Do not contact us separately, as this may delay the process and result in your check being released before the dispute is submitted.
If you wish to dispute information recorded on your SOCI Background Check, you will be asked to outline the reason and provide supporting documentation. Disputes can be raised in the following situations:
We will accept and escalate any dispute about the result of the SOCI Background Check through the official dispute form provided by the ACIC.
The ACIC will investigate the dispute and determine an outcome. They may request additional information to support their investigation.
After the dispute is concluded, we will be notified of one of the following outcomes:
We will advise you of the dispute outcome.
Note: Due to privacy concerns, the ACIC may not be able to provide Veritas with specific detail about why the dispute was unsuccessful.
How long is my SOCI Background Check valid? Your organisation will determine how often you must renew your SOCI Background Check based on their internal security policies and risk management framework. Roles with ongoing access to critical infrastructure may require regular renewals.
Your organisation can access your results for up to 3 months after your check is completed. If you withdraw your consent before then, your organisation won’t be able to view your results.
We hold globally recognised ISO 27001:2022 and ISO 9001:2015 certifications. We’re also an accredited body with the Australian Criminal Intelligence Commission (ACIC).
ISO 27001:2022 is an international standard for information security management. It sets out the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). This helps Veritas manage the security of sensitive information (such as your personal data) by addressing risks related to confidentiality, integrity, and availability.
ISO 9001:2015 is a globally recognised standard for quality management systems (QMS). It outlines a framework for consistently delivering services that meet customer and regulatory requirements, with a focus on continuous improvement and customer satisfaction.
These accreditations ensure robust systems to protect your personal information, ensure secure data handling and storage, and deliver services reliably and efficiently.
Your data is securely stored in Australian data centres. Although they managed these data centres, they don’t have access to your information.
We’ll store your personal information for 5 years in accordance with the guidelines set by the Australian Criminal Intelligence Commission (ACIC).
Your organisation can access your results within their secure online portal for 3 months in accordance with the guidelines set by the Australian Criminal Intelligence Commission (ACIC). Should you withdraw your consent before your results are shared, your organisation will never have access to your results.