{"type":"doc","content":[{"type":"paragraph","attrs":{"id":"v0-p-1870"},"content":[{"type":"text","text":"The responsible entity for one or more critical infrastructure assets must have, and comply with, a critical infrastructure risk management program (unless an exemption applies)."}]}]}