Document ID: chunk:federal_register_of_legislation:F2024C01258:schedule:2
Version: federal_register_of_legislation:F2024C01258
Segment Type: schedule
Provision Reference: sch 2
Character Range: 17829–18419

Schedule 2—Steps for privacy safeguard 12—security of CDR data held by accredited data recipients
Part 1—Steps for privacy safeguard 12
1.1  Purpose of Part
1.2  Interpretation
1.3  Step 1—Define and implement security governance in relation to CDR data
1.4  Step 2—Define the boundaries of the CDR data environment
1.5  Step 3—Have and maintain an information security capability
1.6  Step 4—Implement a formal controls assessment program
1.7  Step 5—Manage and report security incidents
Part 2—Minimum information security controls
2.1  Purpose of Part
2.2  Information security controls