<!-- calico-law-export-v1; format=markdown; copy=C2018A00029/C2026C00213/f578e546a17068939a3a5a928474713f844dfae8; scope=navPoint_127; reference=none; target=automatic -->

##### <strong>30CY  Vulnerability assessment</strong>

- \(1\) A&#32;<em><strong>vulnerability assessment</strong></em>&#32;is an assessment:

    - \(a\) that relates to a system of national significance; and

    - \(b\) that either:

        - \(i\) relates to all types of cyber security incidents; or

        - \(ii\) relates to one or more specified types of cyber security incidents; and

    - \(c\) if the assessment relates to all types of cyber security incidents—the purpose of which is to test the vulnerability of the system to all types of cyber security incidents; and

    - \(d\) if the assessment relates to one or more specified types of cyber security incidents—the purpose of which is to test the vulnerability of the system to those types of cyber security incidents; and

    - \(e\) that complies with such requirements \(if any\) as are specified in the rules\.

- \(2\) Requirements specified under paragraph&#160;\(1\)\(e\):

    - \(a\) may be of general application; or

    - \(b\) may relate to one or more specified systems of national significance; or

    - \(c\) may relate to one or more specified types of cyber security incidents\.

    Note:&#160;For specification by class, see subsection&#160;13\(3\) of the&#32;<em>Legislation Act 2003</em>\.

- \(3\) Subsection&#160;\(2\) of this section does not, by implication, limit subsection&#160;33\(3A\) of the&#32;<em>Acts Interpretation Act 1901</em>\.

---

## Source and attribution

Saved copy: C2018A00029 / C2026C00213 / f578e546a17068939a3a5a928474713f844dfae8

Scope: navPoint\_127

Compiled 2026\-06\-04\. This does not establish legal commencement\.

Official source: https://www\.legislation\.gov\.au/C2018A00029/2026\-06\-04/2026\-06\-04/text/1/epub/OEBPS/document\_1/document\_1\.html

Licence: https://creativecommons\.org/licenses/by/4\.0/

Based on content from the Federal Register of Legislation at 1 October 2026\. For the latest information on Australian Government legislation please go to https://www\.legislation\.gov\.au\.

Converted XHTML into Tiptap JSON; recovered lists from paragraph classes; kept literal labels and text\. Print layout is changed\.

The Commonwealth Coat of Arms is not covered by the CC BY licence\.