<!-- calico-law-export-v1; format=agent-markdown; copy=C2018A00029/C2026C00213/f578e546a17068939a3a5a928474713f844dfae8; scope=navPoint_78; reference=none; target=automatic -->

##### <strong>30AKA  Responsible entity must have regard to certain matters in deciding whether to adopt or vary critical infrastructure risk management program etc.</strong>

###### <em>Adoption of program</em>

- \(1\) If an entity is the responsible entity for one or more critical infrastructure assets, then, in deciding whether to adopt a critical infrastructure risk management program, the entity must have regard to such matters \(if any\) as are set out in the rules\.

    Civil penalty:&#160;200 penalty units\.

- \(2\) Subsection&#160;\(1\) does not limit the matters to which the responsible entity may have regard\.

###### <em>Review of program</em>

- \(3\) If:

    - \(a\) an entity is the responsible entity for one or more critical infrastructure assets; and

    - \(b\) the entity has adopted a critical infrastructure risk management program that applies to the entity;

    then, in reviewing the program in accordance with section&#160;30AE, the entity must have regard to such matters \(if any\) as are set out in the rules\.

    Civil penalty:&#160;200 penalty units\.

- \(4\) Subsection&#160;\(3\) does not limit the matters to which the responsible entity may have regard\.

###### <em>Variation of program</em>

- \(5\) If:

    - \(a\) an entity is the responsible entity for one or more critical infrastructure assets; and

    - \(b\) the entity has adopted a critical infrastructure risk management program that applies to the entity;

    then, in deciding whether to vary the program, the entity must have regard to such matters \(if any\) as are set out in the rules\.

    Civil penalty:&#160;200 penalty units\.

- \(6\) Subsection&#160;\(5\) does not limit the matters to which the responsible entity may have regard\.

###### <em>Rules</em>

- \(7\) Rules made for the purposes of subsection&#160;\(1\), \(3\) or \(5\):

    - \(a\) may be of general application; or

    - \(b\) may relate to one or more specified critical infrastructure assets\.

    Note:&#160;For specification by class, see subsection&#160;13\(3\) of the&#32;<em>Legislation Act 2003</em>\.

- \(8\) Subsection&#160;\(7\) of this section does not, by implication, limit subsection&#160;33\(3A\) of the&#32;<em>Acts Interpretation Act 1901</em>\.

---

## Source and attribution

Saved copy: C2018A00029 / C2026C00213 / f578e546a17068939a3a5a928474713f844dfae8

Scope: navPoint\_78

Compiled 2026\-06\-04\. This does not establish legal commencement\.

Official source: https://www\.legislation\.gov\.au/C2018A00029/2026\-06\-04/2026\-06\-04/text/1/epub/OEBPS/document\_1/document\_1\.html

Licence: https://creativecommons\.org/licenses/by/4\.0/

Based on content from the Federal Register of Legislation at 1 October 2026\. For the latest information on Australian Government legislation please go to https://www\.legislation\.gov\.au\.

Converted XHTML into Tiptap JSON; recovered lists from paragraph classes; kept literal labels and text\. Print layout is changed\.

The Commonwealth Coat of Arms is not covered by the CC BY licence\.
