30AC  Responsible entity must have a critical infrastructure risk management program

•   If an entity is the responsible entity for one or more critical infrastructure assets, the entity must:

  • (a)

    adopt; and

  • (b)

    maintain;

  a critical infrastructure risk management program that applies to the entity.

  Civil penalty: 200 penalty units.