30BEA  Significant impact

•   For the purposes of this Part, a cyber security incident has a significant impact (whether direct or indirect) on the availability of an asset if, and only if:

  • (a)

    both:

    • (i)

      the asset is used in connection with the provision of essential goods or services; and

    • (ii)

      the incident has materially disrupted the availability of those essential goods or services; or

  • (b)

    any of the circumstances specified in the rules exist in relation to the incident.