QUESTION Could the Minister please advise on the following: Has the Department completed risk assessments regarding potential artificial intelligence [AI] attacks against critical infrastructure (transport, water treatment, power plants etcetera), and if so have those risk assessments: resulted in specific changes in cyber security regulations or measures; resulted in specific changes being made to cyber security protections; and included systemic, catastrophic and cascading threats and hazards to Australia's critical infrastructure. Will data centres hosting AI models be subject to specific risk management program requirements, and: in that context has the Department done modelling to clarify, update or capture AI hazards as material risks; and is there a pathway to consider AI models, once they're embedded in government activities, as critical infrastructure in their own right. There is currently no statutory requirement for a regular assessment of risk to Australia's critical infrastructure to guide individual critical infrastructure risk management programs. What work has the Department undertaken to address this. What modelling has the Department completed in regards to data centres demand on potable water for cooling. Has the Department modelled the impact of data centres on the national energy grid. ANSWER Senator the Hon Malarndirri McCarthy - The Minister representing the Minister for Infrastructure, Transport, Regional Development and Local Government has provided the following answer to the honourable Senator's question: 1-3. Questions regarding critical infrastructure security and risk management are best directed to the Department of Home Affairs, which are responsible for leading on these issues across Government, including through administering the Security of Critical Infrastructure Act 2018 , the Security of Critical Infrastructure framework and the Critical Infrastructure Resilience Strategy. 4-5. Questions regarding water resources and energy policy are best directed to the Department of Climate Change, Energy, the Environment and Water (DCCEEW); DISR, as the overall lead agency on Data Centres, may also be able to provide a response.