72ACyber security requirements

72A Cyber security requirements

72A Cyber security requirements

(1) The regulations may make provision for the following—

(a) the adoption and implementation by a network operator of policies and procedures for managing cyber security risks and responding to cyber security incidents,

(b) the external review and accreditation of a network operator’s policies and procedures for managing cyber security risks and responding to cyber security incidents.

(2) Without limiting subsection (1), the regulations may require a network operator’s policies and procedures to address the following matters—

(a) notifying the Secretary of cyber security incidents,

(b) the process for auditing the network operator’s implementation and compliance with the policies and procedures, including reporting the audit result to the Secretary.

s 72A: Ins 2021 No 34, Sch 4[14].