Security of Critical Infrastructure Act 2018

If:

the Secretary gives a request under section 35AX that was authorised by a Ministerial authorisation; and

the authorised agency does one or more acts or things in compliance with the request;

prepare a written report that:

sets out details of those acts or things; and

explains the extent to which doing those acts or things has amounted to an effective response to the cyber security incident to which the Ministerial authorisation relates; and

give a copy of the report to the Defence Minister; and

give a copy of the report to the Minister.

The chief executive of the authorised agency must comply with subsection (1) as soon as practicable after the end of the period specified in the request and, in any event, within 3 months after the end of the period specified in the request.