35AU  Directions prevail over inconsistent critical infrastructure risk management programs

•   If a critical infrastructure risk management program is applicable to an entity, the program has no effect to the extent to which it is inconsistent with a direction given to the entity under section 35AQ.