30AE Review of critical infrastructure risk management program
If:
(a)
an entity is the responsible entity for one or more critical infrastructure assets; and
(b)
the entity has adopted a critical infrastructure risk management program that applies to the entity;
the entity must review the program on a regular basis.
Civil penalty: 200 penalty units.