sec.17Content of a plan

sec.17 Content of a plan

A risk management plan for a SISTO must— contain an assessment of the risks to the SISTO of a terrorist act involving the SISTO; and state the measures to be taken to prevent or reduce the risks; and contain a range of measures to respond to changes in the national counter-terrorism alert level or the SISTO’s level of risk. The risk management plan must also state the measures to be taken in the event of a particular security incident involving the SISTO, including the procedures for each of the following— responding to the security incident; recovering the SISTO from the security incident; providing for the SISTO’s continuity; communicating immediately with the Queensland Police Service; unless otherwise instructed by the chief executive, communicating as soon as practicable with— the chief executive; and if the SISTO has 1 or more related SISTOs—each related SISTO entity; and the owners or occupiers of areas immediately neighbouring a facility used for carrying on the SISTO; coordinating the risk management plan with any relevant— emergency plan and procedure prepared under the Work Health and Safety Act 2011 ; and disaster management plan prepared under the Disaster Management Act 2003 ; and potential exercise of power under the Public Safety Preservation Act 1986 . The risk management plan must also— state details, including the frequency, of relevant training to be given to the employees engaged in carrying on the SISTO; and provide for the keeping of a record of training given to the employees in accordance with the risk management plan. The risk management plan must clearly identify each person, whether by reference to the person’s position or title, who has an obligation to comply with the risk management plan. The risk management plan must also state the following— the positions or titles of the persons involved in carrying on the SISTO who are responsible for implementing the risk management plan; the contact details, in the case of a security incident, for the persons mentioned in paragraph (a) ; the measures to be taken for maintaining security of the auditable records for the SISTO. If the SISTO has 1 or more related SISTOs, the risk management plan must include the arrangements for coordinating the plan with the risk management plans of the related SISTOs. In this section— relevant training means training about the procedures to be followed to prevent or respond to a security incident. s 17 amd 2011 No. 18 s 404 sch 4 pt 2 div 2 (sec.17-ssec.1) A risk management plan for a SISTO must— contain an assessment of the risks to the SISTO of a terrorist act involving the SISTO; and state the measures to be taken to prevent or reduce the risks; and contain a range of measures to respond to changes in the national counter-terrorism alert level or the SISTO’s level of risk. (sec.17-ssec.2) The risk management plan must also state the measures to be taken in the event of a particular security incident involving the SISTO, including the procedures for each of the following— responding to the security incident; recovering the SISTO from the security incident; providing for the SISTO’s continuity; communicating immediately with the Queensland Police Service; unless otherwise instructed by the chief executive, communicating as soon as practicable with— the chief executive; and if the SISTO has 1 or more related SISTOs—each related SISTO entity; and the owners or occupiers of areas immediately neighbouring a facility used for carrying on the SISTO; coordinating the risk management plan with any relevant— emergency plan and procedure prepared under the Work Health and Safety Act 2011 ; and disaster management plan prepared under the Disaster Management Act 2003 ; and potential exercise of power under the Public Safety Preservation Act 1986 . (sec.17-ssec.3) The risk management plan must also— state details, including the frequency, of relevant training to be given to the employees engaged in carrying on the SISTO; and provide for the keeping of a record of training given to the employees in accordance with the risk management plan. (sec.17-ssec.4) The risk management plan must clearly identify each person, whether by reference to the person’s position or title, who has an obligation to comply with the risk management plan. (sec.17-ssec.5) The risk management plan must also state the following— the positions or titles of the persons involved in carrying on the SISTO who are responsible for implementing the risk management plan; the contact details, in the case of a security incident, for the persons mentioned in paragraph (a) ; the measures to be taken for maintaining security of the auditable records for the SISTO. (sec.17-ssec.6) If the SISTO has 1 or more related SISTOs, the risk management plan must include the arrangements for coordinating the plan with the risk management plans of the related SISTOs. (sec.17-ssec.7) In this section— relevant training means training about the procedures to be followed to prevent or respond to a security incident.