Transport Security (Counter-Terrorism) Act 2008
sec.21Audit record
Start here
Get a plain-English read of sec.21
Turn the raw legal text into a practical explanation grounded in Transport Security (Counter-Terrorism) Act 2008.
sec.21 Audit record
A SISTO entity must keep a record of an audit conducted under section 20 for the SISTO, as required under this section. Maximum penalty—50 penalty units. The record must contain the following information— the date of the audit; the name of the person (the auditor ) who carried out the audit; the auditor’s contact details and, if applicable, the auditor’s position or title within an entity responsible for conducting the audit; the audit results, including the auditor’s recommended actions and recommended implementation dates for the actions; the auditor’s recommended actions that have been implemented and the dates on which they were implemented; the auditor’s recommended actions that have not been implemented and the reasons why they have not been implemented. The record must be kept for 3 years after the date of the last entry in the record. (sec.21-ssec.1) A SISTO entity must keep a record of an audit conducted under section 20 for the SISTO, as required under this section. Maximum penalty—50 penalty units. (sec.21-ssec.2) The record must contain the following information— the date of the audit; the name of the person (the auditor ) who carried out the audit; the auditor’s contact details and, if applicable, the auditor’s position or title within an entity responsible for conducting the audit; the audit results, including the auditor’s recommended actions and recommended implementation dates for the actions; the auditor’s recommended actions that have been implemented and the dates on which they were implemented; the auditor’s recommended actions that have not been implemented and the reasons why they have not been implemented. (sec.21-ssec.3) The record must be kept for 3 years after the date of the last entry in the record.
- (a) the date of the audit;
- (b) the name of the person (the auditor ) who carried out the audit;
- (c) the auditor’s contact details and, if applicable, the auditor’s position or title within an entity responsible for conducting the audit;
- (d) the audit results, including the auditor’s recommended actions and recommended implementation dates for the actions;
- (e) the auditor’s recommended actions that have been implemented and the dates on which they were implemented;
- (f) the auditor’s recommended actions that have not been implemented and the reasons why they have not been implemented.