# Security of Critical Infrastructure Act 2018

Source: au:frl:C2018A00029
Version: C2026C00213
Commit: 32c53e4ee786e1b4227c653ce7c09bf6d0433a92

<source-content>
<section id="navPoint_87"><h5 id="v0-p-2171"><strong>30AQ  Reporting obligations relating to certain assets that are not covered by a critical infrastructure risk management program</strong></h5><h6 id="v0-p-2172"><em>Scope</em></h6><ul><li><span>(1)</span><p id="v0-p-2173">This section applies if, during a period (the <em><strong>relevant period</strong></em>) that consists of the whole or a part of a financial year, an entity was the responsible entity for one or more critical infrastructure assets that are covered by subsection 30AB(4), (5) or (6).</p></li></ul><h6 id="v0-p-2174"><em>Annual report</em></h6><ul><li><span>(2)</span><p id="v0-p-2175">The entity must, within 90 days after the end of the financial year, give:</p><ul><li><span>(a)</span><p id="v0-p-2176">if there is a relevant Commonwealth regulator that has functions relating to the security of those assets—the relevant Commonwealth regulator; or</p></li><li><span>(b)</span><p id="v0-p-2177">in any other case—the Secretary;</p></li></ul><p id="v0-p-2178">a report that:</p><ul><li><span>(c)</span><p id="v0-p-2179">sets out the reason why those assets are covered by subsection 30AB(4), (5) or (6); and</p></li><li><span>(d)</span><p id="v0-p-2180">if a hazard had a significant relevant impact on one or more of those assets during the relevant period—includes a statement that:</p><ul><li><span>(i)</span><p id="v0-p-2181">identifies the hazard; and</p></li><li><span>(ii)</span><p id="v0-p-2182">evaluates the effectiveness of the action (if any) taken by the entity for the purposes of mitigating the significant relevant impact of the hazard on the assets concerned; and</p></li></ul></li><li><span>(e)</span><p id="v0-p-2183">is in the approved form; and</p></li><li><span>(f)</span><p id="v0-p-2184">if the entity has a board, council or other governing body—is approved by the board, council or other governing body, as the case requires.</p></li></ul><p id="v0-p-2185">Civil penalty: 150 penalty units.</p></li><li><span>(3)</span><p id="v0-p-2186">A report given by an entity under subsection (2) is not admissible in evidence against the entity in civil proceedings relating to a contravention of a civil penalty provision of this Act.</p></li></ul></section>
</source-content>



Evidence: f6a8dd06cbdeb355bf79b3ee800f26607ebdf213a18f1ba82184f79748cc6f18 (Official source HTML)
Evidence: ffdb9181f16a83f3392ff5a975055423d2d3601872ac649ca26adb1e1490bb84 (Original stylesheet)
Evidence: ca304523ec1a65ffdf482c017915ad9b5fd6e441785fc2dcc78c7e1c8be0ecc1 (Commonwealth Coat of Arms)
Evidence: 70653e212c45abc33024b8afb8e6b079925021e9bb085e8e86f6374eb9d36937 (Publisher source record)
Evidence: 593dcf282478b7b2ba14e4d6344dc9404e4ee94e626c272e9f977c39db05d4b3 (Publisher version record)
Evidence: 0e7dcd511ec3c484b28774d01a2038a4b8ea5a021123bdefc4c6b620e65d3ff7 (Original structured document)
Evidence: a84c8f5f09e92c4b95f3d650e969cd3f12eaacee19fc60d89ea571ce8b8fc2b2 (Original provenance metadata)
Evidence: 13efff88f3330ab0ba2d0dd54ded3b27e168cc96bcbd7e931abe2449cb474135 (Original document validation)
Evidence: 02ae4b95c45b844dea6d05a54c14a2118d47b9a61b4fd80d1b2b77a44528d198 (Original source paragraphs)
Evidence: a93e8924c8eaddeee0fa1ba03011712be9ea2331b08444081776e0361b7ff890 (Original editor validation)
Evidence: 04112fa9684d5dd52d89126ec49c609c7f5fbd5682c37d59d52aaeaee267d224 (Original import manifest)
Evidence: b7b44bc833fb2e728d2f336725218233b4e38620047d100d8a3bdaa1d6b0851a (Retained publication provenance)