On 30 July 2026, the Australian Energy Market Commission (AEMC) published a final determination and final rule to embed and formalise the Australian Energy Market Operator’s (AEMO) gas sector cyber security roles and responsibilities under the National Gas Rules (NGR).  

The final rule:

1. establishes cyber security as a function for AEMO in the NGR
2. harmonises AEMO’s cyber security roles and responsibilities with its electricity sector role to support a strategic and coordinated approach to cyber security in the energy system
3. enables AEMO to recover costs and have liability protection for cyber security activities.  

The final rule does this by adding four new functions in the NGR.  

These four functions include:

• function 1 – cyber security incidents coordinator  
• function 2 – supporting cyber preparedness and uplift  
• function 3 – examining risks and providing advice to government and industry  
• function 4 – facilitating the distribution of critical cyber security information. 

Commencement

The final rule commences on publication of this determination on 30 July 2026. 

Rule change request  

On 28 October 2025, the AEMC received a rule change request from the Honourable Chris Bowen MP, Minister for Climate Change and energy.

We published a consultation paper on 29 January 2026, and a draft determination and draft rule on 7 May 2026.