Are you ready for the conversation?

Your answers stay with you

Everything is processed in your browser. Your answers and your brief are never sent to Orro. If you book a session at the end, only the contact details in that separate form are sent.

Print or save the brief before you leave. A refresh clears it, and it is not saved on this site.

This is not a test

There is no score. Answering “no” or “not sure” is useful: each answer points to the part of your organisation that holds the information, and what to ask them. Most people won’t know every answer, and that is the point.

Some organisations should talk to us instead

Skip the tool and contact Orro directly if:

you already know the Act applies to your organisation
you hold a critical infrastructure risk management program
you have received a notice, declaration or direction from government under the Act

If any of these apply, you’re already further along than this tool assumes, and a conversation will be more useful than a questionnaire.

Contact Orro directly

Please do not enter

The name of a specific asset, the contents of a risk management program or a report to government, or the details of any declaration, notice or direction you have received. Some of that is protected information under the Act, with restrictions on sharing it. Nothing in this tool asks for it, and there is nowhere to type it.

What does your organisation do? (optional. It is printed on the brief, and does not change the questions.)

Your meeting brief

Who to bring to the table

Find these out first

You said you were not sure on these. Each one has a question you can send to a colleague today.

Where there is work to do

You answered no to these. None of them is unusual, and all of them are fixable.

What you already have

Worth saying out loud at the meeting — it changes where we start.

The date everything works back from

What a session with Orro covers

Where you actually sit. Whether the Act applies to you and which parts, using the conversation rather than a generic checklist.
A dated plan. What has to be true by 10 June 2027, what can follow, and what depends on a budget cycle you have already passed.
Who does what. Each item against a function in your organisation, so nothing sits unowned.
What to tell the board. The short version your directors need, and when they need it.

Bring the people listed above. One hour with the right four people beats three hours with the wrong ten.

Request a session

Tell us how to reach you and we will arrange a working session. This form is separate from the questions. Your answers and your brief stay in this browser and are not included.

There is deliberately no free-text box. Please do not send the name of a specific asset, the contents of a risk management program or a report to government, or the details of any declaration, notice or direction you have received.

Name

This field is for validation purposes and should be left unchanged.

Your name(Required)

Work email(Required)

Organisation(Required)

Your role

Phone

When would suit(Required)

What should the session cover?

Whether the Act applies to us, and which parts

A dated plan back from 10 June 2027

Incident response and reporting readiness

What to take to the board

Supplier and third-party dependencies

Getting the right people and budget lined up

Consent to contact(Required)

Yes, Orro can contact me about this request and the session.

Updates

Send me occasional updates on critical infrastructure regulation. Optional, and I can unsubscribe at any time.