Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 10: s 10 Supply chain hazards: six material risks and impact mitigation, major suppliers listed

A responsible entity must establish and maintain in its CIRMP a process or system, as far as reasonably practicable, to minimise or eliminate the material risks of unauthorised access to, interference with or exploitation of the asset's supply chain; misuse of privileged access to the asset by any supply chain provider; disruption of the asset due to a supply chain issue; threats to people, assets, equipment, products, services, distribution and intellectual property within supply chains; risks arising from major suppliers; and failure or lowered capacity of other assets and entities in the supply chain; and to mitigate the relevant impact of a supply chain hazard; for the annual report it has regard to whether the CIRMP lists its major suppliers and describes the supply chain hazards that could have a relevant impact.