30AC Responsible entity must have a critical infrastructure risk management program
If an entity is the responsible entity for one or more critical infrastructure assets, the entity must:
(a)
adopt; and
(b)
maintain;
a critical infrastructure risk management program that applies to the entity.
Civil penalty: 200 penalty units.