Gas Supply Act 1996

The Minister may, by written order, give a direction (a cyber security direction) to a network operator requiring the operator to take the action the Minister considers reasonably necessary to—

respond to the impact of a cyber security incident on the operator’s information technology systems, or

prevent a cyber security incident having an impact on the operator’s information technology systems.

A copy of the Minister’s written order under subsection (1) must be given to each network operator to whom the direction applies.

A cyber security direction—

operates for the period specified in the direction, and

may be varied or revoked by a subsequent direction under this section.

A person given a cyber security direction must comply with the direction.

for a corporation—

2,000 penalty units, and

for a continuing offence—a further 200 penalty units for each day the offence continues, or

for an individual—

400 penalty units, and

for a continuing offence—a further 40 penalty units for each day the offence continues.