Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 11A(1): s 11A(1) Central management of physical security and natural hazards, with the physical consequences of every hazard family outlined

A responsible entity for an enhanced-class asset must establish and maintain a process or system in its CIRMP to centrally manage physical security and natural hazards, outlining the location, ownership and nature of the site, the asset's critical components, and the areas holding business critical data or containing critical components including critical systems; and as far as reasonably practicable to outline and consider the physical security consequences of all hazards, including cyber, credential compromise, lateral movement, other physical and natural, personnel and supply chain hazards (a cyber incident that opens gates, or a supply chain delay that changes workplace operations).