{"type":"doc","content":[{"type":"section","attrs":{"id":"navPoint_111"},"content":[{"type":"heading","attrs":{"id":"v0-p-2414","level":5},"content":[{"type":"text","text":"30CJ","marks":[{"type":"bold"}]},{"type":"text","text":"  ","marks":[{"type":"bold"}]},{"type":"text","text":"Incident response plan","marks":[{"type":"bold"}]}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(1)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2415"},"content":[{"type":"text","text":"An "},{"type":"text","text":"incident response plan","marks":[{"type":"bold"},{"type":"italic"}]},{"type":"text","text":" is a written plan:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2416"},"content":[{"type":"text","text":"that applies to an entity that is the responsible entity for a system of national significance; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2417"},"content":[{"type":"text","text":"that relates to the system; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(c)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2418"},"content":[{"type":"text","text":"that relates to cyber security incidents; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(d)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2419"},"content":[{"type":"text","text":"the purpose of which is to plan for responding to cyber security incidents that could have a relevant impact on the system; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(e)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2420"},"content":[{"type":"text","text":"that complies with such requirements (if any) as are specified in the rules."}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(2)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2421"},"content":[{"type":"text","text":"Requirements specified under paragraph"},{"type":"text","text":" "},{"type":"text","text":"(1)(e):"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2422"},"content":[{"type":"text","text":"may be of general application; or"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2423"},"content":[{"type":"text","text":"may relate to one or more specified systems of national significance; or"}]}]},{"type":"legalListItem","attrs":{"marker":"(c)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2424"},"content":[{"type":"text","text":"may relate to one or more specified types of cyber security incidents."}]}]}]},{"type":"paragraph","attrs":{"id":"v0-p-2425"},"content":[{"type":"text","text":"Note:"},{"type":"text","text":" "},{"type":"text","text":"For specification by class, see subsection"},{"type":"text","text":" "},{"type":"text","text":"13(3) of the "},{"type":"text","text":"Legislation Act 2003","marks":[{"type":"italic"}]},{"type":"text","text":"."}]}]},{"type":"legalListItem","attrs":{"marker":"(3)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2426"},"content":[{"type":"text","text":"Subsection"},{"type":"text","text":" "},{"type":"text","text":"(2) of this section does not, by implication, limit subsection"},{"type":"text","text":" "},{"type":"text","text":"33(3A) of the "},{"type":"text","text":"Acts Interpretation Act 1901","marks":[{"type":"italic"}]},{"type":"text","text":"."}]}]}]}]}]}