Document ID: chunk:federal_register_of_legislation:F2024C01108:reg:5:p13
Version: federal_register_of_legislation:F2024C01108
Segment Type: reg
Provision Reference: reg 5 (pt 13/35)
Character Range: 335561–338540

physical infrastructure.
 1.        specific objectives for the time taken to achieve the outcomes referred to in paragraph (2)(b); and
 2.        procedures for communicating during a Major Event with persons that may be impacted by the Major Event, for the purposes of ensuring those persons are adequately informed about:

(i)         the nature and impact of the Major Event; and

(ii)       the steps that are being taken or will be taken to manage the Major Event; and

(iii)     the likely timing of the steps referred to in subparagraph (ii); and

(iv)      the likely timing of the resumption of the usual operation of the Operator's Critical Business Services, Market Operations and Market Services; and
 1.          any operational dependencies between the Operator and any other person that may affect the matters referred to in paragraphs (a) to (h).
     (5) Without limiting paragraph (4)(i), an Operator must have in place adequate arrangements to ensure that the Operator is able to carry out its Business Continuity Plans with respect to any Critical Business Services the subject of an Outsourcing Arrangement.

Notification of an Incident or Major Event
(6) Without limiting paragraph (4)(h), an Operator must:
 1.         notify ASIC immediately upon becoming aware of:
        1.          an unexpected disruption to the usual operation of the Operator's Critical Business Services that may interfere with the fair, orderly or transparent operation of any Market or CGS Market (Incident); or
           (ii) a Major Event; and
 1.        notify other Operators, operators of Clearing Facilities and Participants that may be impacted by an Incident or a Major Event, as soon as practicable after becoming aware of the Incident or Major Event.
(7) If a notification is made under subrule (6), the Operator must within seven days of the notification provide ASIC with a written report detailing:
 1.         the circumstances of the Incident or Major Event; and
 2.        the steps taken to manage the Incident or Major Event.

Review, update and testing of plans
(8) An Operator must:
 1.         review and test its Business Continuity Plans and the arrangements referred to in subrule (5):
        1.          at a frequency and in a manner appropriate to the nature, scale and complexity of the Operator's Critical Business Services, Market Operations and Market Services and to the Operator's structure and location; and
        2.        at a minimum:
               1.        each time there is a material change to the Operator's Critical Business Services, Market Operations and Market Services or to the Operator's structure and location; and
               2.        as soon as practicable after the occurrence of a Major Event; and
               3.        once every 12 months; and
 1.        update the Business Continuity Plans as required to ensure they comply with subrules (1) to (4).

Documentation of plans and testing
(9) An Operator must