30CF  Review of incident response plan

  If:

(a)

an entity is the responsible entity for a system of national significance; and

(b)

the entity has adopted an incident response plan that applies to the entity;

the entity must review the plan on a regular basis.

Civil penalty: 200 penalty units.