{"type":"doc","content":[{"type":"section","attrs":{"id":"navPoint_74"},"content":[{"type":"heading","attrs":{"id":"v0-p-1977","level":5},"content":[{"type":"text","text":"30AH","marks":[{"type":"bold"}]},{"type":"text","text":"  ","marks":[{"type":"bold"}]},{"type":"text","text":"Critical infrastructure risk management program","marks":[{"type":"bold"}]}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(1)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1978"},"content":[{"type":"text","text":"A "},{"type":"text","text":"critical infrastructure risk management program","marks":[{"type":"bold"},{"type":"italic"}]},{"type":"text","text":" is a written program:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1979"},"content":[{"type":"text","text":"that applies to a particular entity that is the responsible entity for one or more critical infrastructure assets; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1980"},"content":[{"type":"text","text":"the purpose of which is to do the following for each of those assets:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(i)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1981"},"content":[{"type":"text","text":"identify each hazard where there is a material risk that the occurrence of the hazard could have a relevant impact on the asset;"}]}]},{"type":"legalListItem","attrs":{"marker":"(ii)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1982"},"content":[{"type":"text","text":"so far as it is reasonably practicable to do so—minimise or eliminate any material risk of such a hazard occurring;"}]}]},{"type":"legalListItem","attrs":{"marker":"(iii)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1983"},"content":[{"type":"text","text":"so far as it is reasonably practicable to do so—mitigate the relevant impact of such a hazard on the asset; and"}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(c)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1984"},"content":[{"type":"text","text":"that complies with such requirements (if any) as are specified in the rules."}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(2)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1985"},"content":[{"type":"text","text":"Requirements specified under paragraph"},{"type":"text","text":" "},{"type":"text","text":"(1)(c):"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1986"},"content":[{"type":"text","text":"may be of general application; or"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1987"},"content":[{"type":"text","text":"may relate to one or more specified critical infrastructure assets."}]}]}]},{"type":"paragraph","attrs":{"id":"v0-p-1988"},"content":[{"type":"text","text":"Note:"},{"type":"text","text":" "},{"type":"text","text":"For specification by class, see subsection"},{"type":"text","text":" "},{"type":"text","text":"13(3) of the "},{"type":"text","text":"Legislation Act 2003","marks":[{"type":"italic"}]},{"type":"text","text":"."}]}]},{"type":"legalListItem","attrs":{"marker":"(3)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1989"},"content":[{"type":"text","text":"Subsection"},{"type":"text","text":" "},{"type":"text","text":"(2) of this section does not, by implication, limit subsection"},{"type":"text","text":" "},{"type":"text","text":"33(3A) of the "},{"type":"text","text":"Acts Interpretation Act 1901","marks":[{"type":"italic"}]},{"type":"text","text":"."}]}]},{"type":"legalListItem","attrs":{"marker":"(4)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1990"},"content":[{"type":"text","text":"Rules made for the purposes of paragraph"},{"type":"text","text":" "},{"type":"text","text":"(1)(c) may require that a critical infrastructure risk management program include one or more provisions that:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1991"},"content":[{"type":"text","text":"permit a background check of an individual to be conducted under the AusCheck scheme; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1992"},"content":[{"type":"text","text":"provide that such a background check must include assessment of information relating to one or more of the matters mentioned in paragraphs 5(a), (b), (c) and (d) of the "},{"type":"text","text":"AusCheck Act 2007","marks":[{"type":"italic"}]},{"type":"text","text":", as specified in the rules; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(c)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1993"},"content":[{"type":"text","text":"provide that, if such a background check includes an assessment of information relating to the matter mentioned in paragraph"},{"type":"text","text":" "},{"type":"text","text":"5(a) of the "},{"type":"text","text":"AusCheck Act 2007","marks":[{"type":"italic"}]},{"type":"text","text":", the criteria against which that information must be assessed are the criteria specified in the rules; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(d)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1994"},"content":[{"type":"text","text":"provide that, if such a background check includes assessment of information relating to the matter mentioned in paragraph"},{"type":"text","text":" "},{"type":"text","text":"5(d) of the "},{"type":"text","text":"AusCheck Act 2007","marks":[{"type":"italic"}]},{"type":"text","text":", the assessment must consist of whichever of the following is specified in the rules:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(i)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1995"},"content":[{"type":"text","text":"an electronic identity verification check;"}]}]},{"type":"legalListItem","attrs":{"marker":"(ii)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1996"},"content":[{"type":"text","text":"an in person identity verification check;"}]}]},{"type":"legalListItem","attrs":{"marker":"(iii)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1997"},"content":[{"type":"text","text":"both an electronic identity verification check and an in person identity verification check."}]}]}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(5)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1998"},"content":[{"type":"text","text":"Subsection"},{"type":"text","text":" "},{"type":"text","text":"(4) does not limit paragraph"},{"type":"text","text":" "},{"type":"text","text":"(1)(c)."}]}]},{"type":"legalListItem","attrs":{"marker":"(6)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-1999"},"content":[{"type":"text","text":"In specifying requirements in rules made for the purposes of paragraph"},{"type":"text","text":" "},{"type":"text","text":"(1)(c), the Minister must have regard to the following matters:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2000"},"content":[{"type":"text","text":"any existing regulatory system of the Commonwealth, a State or a Territory that imposes obligations on responsible entities;"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2001"},"content":[{"type":"text","text":"the costs that are likely to be incurred by responsible entities in complying with those rules;"}]}]},{"type":"legalListItem","attrs":{"marker":"(c)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2002"},"content":[{"type":"text","text":"the reasonableness and proportionality of the requirements in relation to the purpose referred to in paragraph"},{"type":"text","text":" "},{"type":"text","text":"(1)(b);"}]}]},{"type":"legalListItem","attrs":{"marker":"(d)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2003"},"content":[{"type":"text","text":"such other matters (if any) as the Minister considers relevant."}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(7)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2004"},"content":[{"type":"text","text":"For the purposes of this section, in determining whether a risk is a material risk, regard must be had to:"}]},{"type":"legalList","attrs":{},"content":[{"type":"legalListItem","attrs":{"marker":"(a)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2005"},"content":[{"type":"text","text":"the likelihood of the hazard occurring; and"}]}]},{"type":"legalListItem","attrs":{"marker":"(b)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2006"},"content":[{"type":"text","text":"the relevant impact of the hazard on the asset if the hazard were to occur."}]}]}]}]},{"type":"legalListItem","attrs":{"marker":"(8)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2007"},"content":[{"type":"text","text":"The rules may provide that a specified risk is taken to be a material risk for the purposes of this section."}]}]},{"type":"legalListItem","attrs":{"marker":"(9)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2008"},"content":[{"type":"text","text":"The rules may provide that the taking of specified action in relation to a critical infrastructure asset is taken to be action that minimises or eliminates any material risk that the occurrence of a specified hazard could have a relevant impact on the asset."}]},{"type":"paragraph","attrs":{"id":"v0-p-2009"},"content":[{"type":"text","text":"Note:"},{"type":"text","text":" "},{"type":"text","text":"For specification by class, see subsection"},{"type":"text","text":" "},{"type":"text","text":"13(3) of the "},{"type":"text","text":"Legislation Act 2003","marks":[{"type":"italic"}]},{"type":"text","text":"."}]}]},{"type":"legalListItem","attrs":{"marker":"(10)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2010"},"content":[{"type":"text","text":"The rules may provide that the taking of specified action in relation to a specified critical infrastructure asset is taken to be action that minimises or eliminates any material risk that the occurrence of a specified hazard could have a relevant impact on the asset."}]},{"type":"paragraph","attrs":{"id":"v0-p-2011"},"content":[{"type":"text","text":"Note:"},{"type":"text","text":" "},{"type":"text","text":"For specification by class, see subsection"},{"type":"text","text":" "},{"type":"text","text":"13(3) of the "},{"type":"text","text":"Legislation Act 2003","marks":[{"type":"italic"}]},{"type":"text","text":"."}]}]},{"type":"legalListItem","attrs":{"marker":"(11)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2012"},"content":[{"type":"text","text":"The rules may provide that the taking of specified action in relation to a critical infrastructure asset is taken to be action that mitigates the relevant impact of a specified hazard on the asset."}]},{"type":"paragraph","attrs":{"id":"v0-p-2013"},"content":[{"type":"text","text":"Note:"},{"type":"text","text":" "},{"type":"text","text":"For specification by class, see subsection"},{"type":"text","text":" "},{"type":"text","text":"13(3) of the "},{"type":"text","text":"Legislation Act 2003","marks":[{"type":"italic"}]},{"type":"text","text":"."}]}]},{"type":"legalListItem","attrs":{"marker":"(12)"},"content":[{"type":"paragraph","attrs":{"id":"v0-p-2014"},"content":[{"type":"text","text":"The rules may provide that the taking of specified action in relation to a specified critical infrastructure asset is taken to be action that mitigates the relevant impact of a specified hazard on the asset."}]},{"type":"paragraph","attrs":{"id":"v0-p-2015"},"content":[{"type":"text","text":"Note:"},{"type":"text","text":" "},{"type":"text","text":"For specification by class, see subsection"},{"type":"text","text":" "},{"type":"text","text":"13(3) of the "},{"type":"text","text":"Legislation Act 2003","marks":[{"type":"italic"}]},{"type":"text","text":"."}]}]}]}]}]}