Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 11: s 11 Physical security and natural hazards: identify physical critical components, control access, respond to intrusions, test the arrangements

A responsible entity must establish and maintain a process or system in its CIRMP to identify the physical critical components of the asset; as far as reasonably practicable to minimise or eliminate a material risk and mitigate a relevant impact of a physical security hazard on a physical critical component and of a natural hazard on the asset; to respond to incidents of unauthorised access to a physical critical component; to control access to physical critical components, restricting it to critical workers or accompanied visitors; and to test that the asset's security arrangements are effective and appropriate to detect, delay, deter, respond to and recover from a breach; for the annual report it has regard to whether the CIRMP describes the critical components, the physical security hazards, the security arrangements and the natural hazards with relevant impact.