8G  Meaning of relevant impact

• (1)

  Each of the following is a relevant impact of a hazard on a critical infrastructure asset:

  • (a)

    the impact (whether direct or indirect) of the hazard on the availability of the asset;

  • (b)

    the impact (whether direct or indirect) of the hazard on the integrity of the asset;

  • (c)

    the impact (whether direct or indirect) of the hazard on the reliability of the asset;

  • (d)

    the impact (whether direct or indirect) of the hazard on the confidentiality of:

    • (i)

      information about the asset; or

    • (ii)

      if information is stored in the asset—the information; or

    • (iii)

      if the asset is computer data—the computer data.

• (2)

  Each of the following is a relevant impact of an incident (including a cyber security incident) on a critical infrastructure asset:

  • (a)

    the impact (whether direct or indirect) of the incident on the availability of the asset;

  • (b)

    the impact (whether direct or indirect) of the incident on the integrity of the asset;

  • (c)

    the impact (whether direct or indirect) of the incident on the reliability of the asset;

  • (d)

    the impact (whether direct or indirect) of the incident on the confidentiality of:

    • (i)

      information about the asset; or

    • (ii)

      if information is stored in the asset—the information; or

    • (iii)

      if the asset is computer data—the computer data.

• (3)

  Each of the following is a relevant impact of an incident (including a cyber security incident) on a system of national significance:

  • (a)

    the impact (whether direct or indirect) of the incident on the availability of the system;

  • (b)

    the impact (whether direct or indirect) of the incident on the integrity of the system;

  • (c)

    the impact (whether direct or indirect) of the incident on the reliability of the system;

  • (d)

    the impact (whether direct or indirect) of the incident on the confidentiality of:

    • (i)

      information about the system; or

    • (ii)

      if information is stored in the system—the information; or

    • (iii)

      if the system is computer data—the computer data.