Document ID: chunk:federal_register_of_legislation:C2025C00045:front:0:p3
Version: federal_register_of_legislation:C2025C00045
Segment Type: other
Provision Reference: 
Character Range: 5580–9080

30AN Application, adoption or incorporation of a law of a State or Territory etc.
30ANA Application, adoption or incorporation of certain documents
30ANB Consultation—rules made for the purposes of paragraph 30ANA(2)(f)
30ANC Disallowance of rules
Part 2AA—Reporting obligations relating to certain assets that are not covered by a critical infrastructure risk management program
30AP Simplified outline of this Part
30AQ Reporting obligations relating to certain assets that are not covered by a critical infrastructure risk management program
Part 2B—Notification of cyber security incidents
30BA Simplified outline of this Part
30BB Application of this Part
30BBA Consultation—rules
30BC Notification of critical cyber security incidents
30BD Notification of other cyber security incidents
30BE Liability
30BEA Significant impact
30BEB Consultation—rules
30BF Relevant Commonwealth body
Part 2C—Enhanced cyber security obligations
Division 1—Simplified outline of this Part
30CA Simplified outline of this Part
Division 2—Statutory incident response planning obligations
Subdivision A—Application of statutory incident response planning obligations
30CB Application of statutory incident response planning obligations—determination by the Secretary
30CC Revocation of determination
Subdivision B—Statutory incident response planning obligations
30CD Responsible entity must have an incident response plan
30CE Compliance with incident response plan
30CF Review of incident response plan
30CG Update of incident response plan
30CH Copy of incident response plan must be given to the Secretary
30CJ Incident response plan
30CK Variation of incident response plan
30CL Revocation of adoption of incident response plan
Division 3—Cyber security exercises
30CM Requirement to undertake cyber security exercise
30CN Cyber security exercise
30CP Compliance with requirement to undertake cyber security exercise
30CQ Internal evaluation report
30CR External evaluation report
30CS Meaning of evaluation report
30CT External auditors
Division 4—Vulnerability assessments
30CU Requirement to undertake vulnerability assessment
30CV Compliance with requirement to undertake a vulnerability assessment
30CW Designated officers may undertake a vulnerability assessment
30CX Compliance with requirement to provide reasonable assistance etc.
30CY Vulnerability assessment
30CZ Vulnerability assessment report
30DA Meaning of vulnerability assessment report
Division 5—Access to system information
Subdivision A—System information reporting notices
30DB Secretary may require periodic reporting of system information
30DC Secretary may require event‑based reporting of system information
30DD Consultation
30DE Duration of system information periodic reporting notice or system information event‑based reporting notice
30DF Compliance with system information periodic reporting notice or system information event‑based reporting notice
30DG Self‑incrimination etc.
30DH Admissibility of report etc.
Subdivision B—System information software
30DJ Secretary may require installation of system information software
30DK Consultation
30DL Duration of system information software notice
30DM Compliance with system information software notice
30DN Self‑incrimination etc.
30DP Admissibility of information etc.
Division 6—Designated officers
30DQ Designated officer
Part 3—Directions by the Minister
Division 1—Simplified outline of this Part
31 Simplified outline of this Part
Division 2—Directions by the Minister
32