Document ID: chunk:federal_register_of_legislation:F2024C00952:reg:8:p28
Version: federal_register_of_legislation:F2024C00952
Segment Type: reg
Provision Reference: reg 8 (pt 28/100)
Character Range: 123001–126060

service provider must, within 2 working days after becoming aware of a change in any of the information given under regulation 5A.120 or 5A.125, notify the Secretary, in writing, of the change.
Penalty: 20 penalty units.
 (2) An offence against subregulation (1) is an offence of strict liability.

5A.135  Security assessments
  In addition to the matters required under regulation 5A.05, a security assessment for an offshore service provider must include the following matters:
 (a) a statement outlining the risk context or threat situation for the offshore service provider;
 (b) identification and evaluation of important assets, infrastructure and operations that need to be protected;
 (c) identification of possible risks or threats to assets, infrastructure and operations, and the likelihood and consequences of their occurrence;
 (d) identification of existing security measures, procedures and operations;
 (e) identification of weaknesses (including human factors) in the infrastructure, policies and procedures;
 (f) identification, selection and prioritisation of possible risk treatments (for example, counter‑measures and procedural changes that need to be implemented) and their effectiveness in reducing risk levels and vulnerabilities.

5A.140  OSPSO qualifications and responsibilities
  An offshore security plan for an offshore service provider must set out:
 (a) the knowledge, skills and other requirements for the OSPSO; and
 (b) the training or qualifications that satisfy the requirements referred to in paragraph (a); and
 (c) the training that must be given to the OSPSO.

5A.145  Other personnel with security role
 (1) An offshore security plan for an offshore service provider must identify, by reference to their positions, personnel who have been assigned security duties and responsibilities in addition to those of the OSPSO.
 (2) The security duties and responsibilities of personnel so identified must be set out in the plan, together with:
 (a) the knowledge, skills and other requirements for the security‑related aspects of their positions; and
 (b) the training or qualifications that satisfy the requirements referred to in paragraph (a); and
 (c) the training that must be given to such personnel.

5A.150  Matters that must be in plan
 (1) An offshore security plan for an offshore service provider must address, in addition to the matters required under regulation 5A.05, the following matters:
 (a) measures to prevent unauthorised carriage or possession of weapons or prohibited items at a supply base of the service provider or on board vessels or aircraft operated by the service provider;
 (b) measures to prevent unauthorised access to a supply base of, or a vessel or aircraft operated by, the service provider;
 (c) procedures for responding to security threats or breaches of security, including procedures for maintaining critical operations of the offshore service provider;
 (d) procedures for responding to security threats or breaches of security occurring during any interface between a vessel or