Security of Critical Infrastructure Act 2018

This Part applies to a critical infrastructure asset if:

the asset is specified in the rules; or

both:

the asset is the subject of a declaration under section 51; and

the declaration determines that this Part applies to the asset.

For specification by class, see subsection 13(3) of the Legislation Act 2003.

Subsection (1) has effect subject to subsections (3), (4), (5) and (6).

The rules may provide that, if an asset becomes a critical infrastructure asset, this Part does not apply to the asset during the period:

beginning when the asset became a critical infrastructure asset; and

ending at a time ascertained in accordance with the rules.

If:

an entity holds a certificate of hosting certification (strategic level) that relates to one or more services; and

the certificate was issued under the scheme that is:

administered by the Commonwealth; and

known as the hosting certification framework; and

a critical infrastructure asset, or a part of a critical infrastructure asset, is used in connection with the provision of any of those services; and

the entity is the responsible entity for the asset;

For reporting obligations, see Part 2AA.

If:

an entity is covered by a provision of a law of the Commonwealth, a State or a Territory; and

the provision is specified in the rules; and

the entity is the responsible entity for a critical infrastructure asset;

For reporting obligations, see Part 2AA.

If:

a critical infrastructure asset is covered by a provision of a law of the Commonwealth, a State or a Territory; and

the provision is specified in the rules;

For reporting obligations, see Part 2AA.