{"type":"doc","content":[{"type":"section","attrs":{"id":"navPoint_69"},"content":[{"type":"heading","attrs":{"id":"v0-p-1922","level":5},"content":[{"type":"text","text":"30AC","marks":[{"type":"bold"}]},{"type":"text","text":"  ","marks":[{"type":"bold"}]},{"type":"text","text":"Responsible entity must have a critical infrastructure risk management program","marks":[{"type":"bold"}]}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1923"},"content":[{"type":"text","text":" "},{"type":"text","text":" "},{"type":"text","text":"If an entity is the responsible entity for one or more critical infrastructure assets, the entity must:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1924"},"content":[{"type":"text","text":"adopt; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1925"},"content":[{"type":"text","text":"maintain;"}]}]}]},{"type":"paragraph","attrs":{"id":"v0-p-1926"},"content":[{"type":"text","text":"a critical infrastructure risk management program that applies to the entity."}]},{"type":"paragraph","attrs":{"id":"v0-p-1927"},"content":[{"type":"text","text":"Civil penalty:"},{"type":"text","text":" "},{"type":"text","text":"200 penalty units."}]}]}]}]}]}