4Application of Part 2A of the Act

4 Application of Part 2A of the Act

(1) For paragraph 30AB(1)(a) of the Act, each of the following is specified: (a) a critical broadcasting asset; (b) a critical domain name system; (c) a critical data storage or processing asset; (d) a critical electricity asset; (e) a critical energy market operator asset; (f) a critical gas asset; (g) a designated hospital; (h) a critical food and grocery asset; (i) a critical freight infrastructure asset; (j) a critical freight services asset; (k) a critical liquid fuel asset; (l) a critical financial market infrastructure asset mentioned in paragraph 12D(1)(i) of the Act; (m) a critical water asset.

Note A data storage system that satisfies all of the requirements under subsection 9(7) of the Act in respect of a critical infrastructure asset specified in subsection (1) is taken to be part of the critical infrastructure asset.

(2) For subsection 30AB(3) of the Act, Part 2A of the Act does not apply to a CI asset mentioned in subsection 4(1) during the period beginning when the asset became a CI asset and ending the later of: (a) 6 months after the commencement of this instrument; and (b) 6 months after the asset became a CI asset. (3) The requirements specified in this instrument for paragraph 30AH(1)(c), and subsections 30AKA(1), (3) and (5) of the Act, apply to a CI asset: (a) that is: (i) specified in subsection 4(1); and (ii) not specified in another instrument for paragraph 30AB(1)(a) of the Act; or (b) referred to in paragraph 30AB(1)(b) of the Act. Compliance with Part 2A obligations through other instruments (4) Part 2 of this instrument does not apply in relation to a CI asset specified in subsection 4(1) (CIRMP Rule asset) if: (a) an entity is the responsible entity for the CIRMP Rule asset; and (b) that entity is also the responsible entity for a CI asset specified in another instrument for the purposes of paragraph 30AB(1)(a) of the Act (other asset); and (c) a CIRMP that applies to the entity for the CIRMP Rule asset complies with the requirements specified for paragraph 30AH(1)(c) in the other instrument relating to the other asset (as if those requirements relate to the CIRMP Rule asset); and (d) the entity complies with the requirements specified for subsections 30AKA(1),(3) and (5) in the other instrument (as if those requirements relate to the CIRMP Rule asset).

Note: Example An entity is a responsible entity for 2 assets—a critical broadcasting asset and a relevant critical infrastructure asset. The relevant critical infrastructure asset is specified in another instrument. The entity applies the requirements in the other instrument to its critical broadcasting asset as if the critical broadcasting asset is a relevant critical infrastructure asset. If the entity complies with the requirements in the other instrument for both assets, it is taken to have complied with the requirements in this instrument.