##### 30CA  Simplified outline of this Part - • This Part sets out enhanced cyber security obligations that relate to systems of national significance\. - • The responsible entity for a system of national significance may be subject to statutory incident response planning obligations\. - • The responsible entity for a system of national significance may be required to undertake a cyber security exercise\. - • The responsible entity for a system of national significance may be required to undertake a vulnerability assessment\. - • If a computer is a system of national significance, or is needed to operate a system of national significance, a relevant entity for the system may be required to: - \(a\) give ASD periodic reports of system information; or - \(b\) give ASD event‑based reports of system information; or - \(c\) install software that transmits system information to ASD\. Note: For a declaration of a system of national significance, see section 52B\. ### Division 2—Statutory incident response planning obligations #### Subdivision A—Application of statutory incident response planning obligations --- ## Source and attribution Saved copy: C2018A00029 / C2026C00213 / f578e546a17068939a3a5a928474713f844dfae8 Scope: navPoint\_100 Compiled 2026\-06\-04\. This does not establish legal commencement\. Official source: https://www\.legislation\.gov\.au/C2018A00029/2026\-06\-04/2026\-06\-04/text/1/epub/OEBPS/document\_1/document\_1\.html Licence: https://creativecommons\.org/licenses/by/4\.0/ Based on content from the Federal Register of Legislation at 1 October 2026\. For the latest information on Australian Government legislation please go to https://www\.legislation\.gov\.au\. Converted XHTML into Tiptap JSON; recovered lists from paragraph classes; kept literal labels and text\. Print layout is changed\. The Commonwealth Coat of Arms is not covered by the CC BY licence\.