CTHIn ForceAct
Security of Critical Infrastructure Act 2018
30CDResponsible entity must have an incident response plan
Start here
Get a plain-English read of 30CD
Turn the raw legal text into a practical explanation grounded in Security of Critical Infrastructure Act 2018.
#### 30CD Responsible entity must have an incident response plan
If:
(a) an entity is the responsible entity for a system of national significance; and
(b) the statutory incident response planning obligations apply to the entity in relation to:
(i) the system; and
(ii) cyber security incidents;
the entity must:
(c) adopt; and
(d) maintain;
an incident response plan that applies to the entity in relation to:
(e) the system; and
(f) cyber security incidents.
Civil penalty: 200 penalty units.