obligations under Part 2 in relation to a critical infrastructure asset will also need to take into account the data storage system; and