{"type":"doc","content":[{"type":"section","attrs":{"id":"navPoint_103"},"content":[{"type":"heading","attrs":{"id":"v0-p-2340","level":5},"content":[{"type":"text","text":"30CB","marks":[{"type":"bold"}]},{"type":"text","text":"  ","marks":[{"type":"bold"}]},{"type":"text","text":"Application of statutory incident response planning obligations—determination by the Secretary","marks":[{"type":"bold"}]}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(1)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2341"},"content":[{"type":"text","text":"The Secretary may, by written notice given to an entity that is the responsible entity for a system of national significance, determine that the statutory incident response planning obligations apply to the entity in relation to:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2342"},"content":[{"type":"text","text":"the system; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2343"},"content":[{"type":"text","text":"cyber security incidents."}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(2)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2344"},"content":[{"type":"text","text":"A determination under this section takes effect at the time specified in the determination."}]}]},{"type":"legalListItem","attrs":{"marker":"(3)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2345"},"content":[{"type":"text","text":"The specified time must not be earlier than the end of the 30"},{"type":"text","text":"‑"},{"type":"text","text":"day period that began when the notice was given."}]}]},{"type":"legalListItem","attrs":{"marker":"(4)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2346"},"content":[{"type":"text","text":"In deciding whether to give a notice to an entity under this section in relation to a system of national significance, the Secretary must have regard to:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2347"},"content":[{"type":"text","text":"the costs that are likely to be incurred by the entity in complying with Subdivision B; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2348"},"content":[{"type":"text","text":"the reasonableness and proportionality of applying the statutory incident response planning obligations to the entity in relation to:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(i)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2349"},"content":[{"type":"text","text":"the system; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(ii)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2350"},"content":[{"type":"text","text":"cyber security incidents; and"}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(c)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2351"},"content":[{"type":"text","text":"such other matters (if any) as the Secretary considers relevant."}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(5)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2352"},"content":[{"type":"text","text":"Before giving a notice to an entity under this section in relation to a system of national significance, the Secretary must consult:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2353"},"content":[{"type":"text","text":"the entity; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2354"},"content":[{"type":"text","text":"if there is a relevant Commonwealth regulator that has functions relating to the security of that system—the relevant Commonwealth regulator."}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(6)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2355"},"content":[{"type":"text","text":"A determination under this section is not a legislative instrument."}]}]}]}]}]}