Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 9A(2): s 9A(2) Enhanced personnel access management: unauthorised or unsupervised access, credential misuse, non-critical-worker access, joiners and leavers

What does 9A(2) require?

A responsible entity for an enhanced-class asset must establish and maintain a process or system in its CIRMP to minimise or eliminate the material risks associated with unauthorised or unsupervised access to critical components, the compromise or misuse of credentials and privileged access used to access the asset, access to the asset by persons other than its critical workers, and incoming and outgoing critical workers.