35AAA  Directions prevail over inconsistent critical infrastructure risk management programs

•   If a critical infrastructure risk management program is applicable to a critical infrastructure asset, the program has no effect to the extent to which it is inconsistent with a direction under subsection 32(2).