Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 4: s 4 Which assets the Rules bind: thirteen classes, six-month grace, and the baseline requirements

What does 4 require?

Part 2A of the Act applies to critical broadcasting assets, critical domain name systems, critical data storage or processing assets, critical electricity assets, critical energy market operator assets, critical gas assets, designated hospitals, critical food and grocery assets, critical freight infrastructure and freight services assets, critical liquid fuel assets, critical financial market infrastructure assets under s 12D(1)(i) and critical water assets (a data storage system meeting s 9(7) of the Act being part of the asset); Part 2A does not apply to such an asset until the later of six months after the Rules commenced and six months after it became a CI asset; and the requirements the Rules specify for s 30AH(1)(c) and s 30AKA(1), (3) and (5) apply to an asset in that list not specified in another Part 2A instrument, or referred to in s 30AB(1)(b).