Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 9(1): s 9(1) Personnel hazards: identify critical workers, permit access only on suitability, address malicious, negligent and off-boarding risks

A responsible entity must establish and maintain a process or system in its CIRMP to identify its critical workers, to permit a critical worker access to critical components only where assessed as suitable for that access, and as far as reasonably practicable to minimise or eliminate the material risks arising from malicious or negligent employees or contractors and from the off-boarding of outgoing employees and contractors; for the annual report it has regard to whether the CIRMP lists its critical workers and describes the personnel risks that could have a relevant impact.