Definition
A regulatory framework requiring critical infrastructure operators (utilities, transportation, telecommunications) to formally identify, assess, and manage AI-specific risks as part of their risk management obligations. Australia's CISC is the first national mandate of this kind.
Why it matters
Critical infrastructure increasingly depends on AI systems for operational decisions; nation-states regulate this because AI failures can cascade into public safety emergencies. Assessment is now a compliance obligation, not optional.