72ACyber security requirements

#### 72A Cyber security requirements 72A Cyber security requirements > > (1) The regulations may make provision for the following— > > > > > (a) the adoption and implementation by a network operator of policies and procedures for managing cyber security risks and responding to cyber security incidents, > > > > > (b) the external review and accreditation of a network operator’s policies and procedures for managing cyber security risks and responding to cyber security incidents. > > > (2) Without limiting subsection (1), the regulations may require a network operator’s policies and procedures to address the following matters— > > > > > (a) notifying the Secretary of cyber security incidents, > > > > > (b) the process for auditing the network operator’s implementation and compliance with the policies and procedures, including reporting the audit result to the Secretary. > > **s 72A:** Ins 2021 No 34, Sch 4\[14\].