CTHIn ForceAct
Security of Critical Infrastructure Act 2018
30ACResponsible entity must have a critical infrastructure risk management program
Start here
Get a plain-English read of 30AC
Turn the raw legal text into a practical explanation grounded in Security of Critical Infrastructure Act 2018.
30AC Responsible entity must have a critical infrastructure risk management program
If an entity is the responsible entity for one or more critical infrastructure assets, the entity must: (a) adopt; and (b) maintain; a critical infrastructure risk management program that applies to the entity.
Civil penalty: 200 penalty units.