30CF Review of incident response plan
If:
(a)
an entity is the responsible entity for a system of national significance; and
(b)
the entity has adopted an incident response plan that applies to the entity;
the entity must review the plan on a regular basis.
Civil penalty: 200 penalty units.