The responsible entity for a critical telecommunications asset must comply with a direction given to the entity under subsection (1).