Section 6 - Security of Critical Infrastructure (Critical infrastructure risk management program) Rules (LIN 23/006) 2023 - Material risk

6Material risk

Start here

Get a plain-English read of 6

Turn the raw legal text into a practical explanation grounded in Security of Critical Infrastructure (Critical infrastructure risk management program) Rules (LIN 23/006) 2023.

6 Material risk

For subsection 30AH(8) of the Act, material risk includes: (a) a stoppage or major slowdown of the CI asset’s function for an unmanageable period; (b) a substantive loss of access to, or deliberate or accidental manipulation of, a critical component of the CI asset;

Example The position, navigation and timing systems affecting provision of service or functioning of the asset.

(c) an interference with the CI asset’s operational technology or information communication technology essential to the functioning of the asset;

Example A Supervisory Control and Data Acquisition (SCADA) system.

(d) the storage, transmission or processing of sensitive operational information outside Australia, which includes:
(i) layout diagrams;
(ii) schematics;
(iii) geospatial information;
(iv) configuration information;
(v) operational constraints or tolerances information;
(vi) data that a reasonable person would consider to be confidential or sensitive about the asset;
(e) remote access to operational control or operational monitoring systems of the CI asset;
(f) impact to the availability, integrity, reliability or confidentiality of the data storage system holding business critical data.