3Definitions

3 Definitions

Note A number of expressions used in this instrument are defined in in the Act, including:

(a) business critical data;
(b) critical component;
(c) critical hospital;
(d) critical infrastructure asset;
(e) critical worker;
(f) relevant impact;
(g) responsible entity;
(h) security.

In this instrument:

Act means the Security of Critical Infrastructure Act 2018.

AusCheck Act means the AusCheck Act 2007.

AusCheck Regulations means the AusCheck Regulations 2017.

background check means a background check under the AusCheck Act.

CI asset means a critical infrastructure asset.

CIRMP is short for critical infrastructure risk management program.

CIRMP criminal record has the same meaning as defined in the AusCheck Regulations.

criminal history criteria means the assessment of:

(a) whether the person has a CIRMP criminal record; and

(b) the nature of the offence.

cyber and information security hazard includes where a person, whether authorised or not:

(a) improperly accesses or misuses information or computer systems about or related to the CI asset; or

(b) uses a computer system to obtain unauthorised control of, or access to the CI asset that might impair its proper functioning.

designated hospital means a critical hospital mentioned in Schedule 1.

major supplier means any vendor that by nature of the product or service they offer, has a significant influence over the security of a responsible entity’s CI asset.

natural hazard includes fire, flood, cyclone, storm, heatwave, earthquake, tsunami, space weather or biological health hazard (such as a pandemic).

personnel hazard includes where a critical worker acts, through malice or negligence:

(a) to compromise the proper function of the asset; or