Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 9A(3): s 9A(3) Enhanced suitability: AusCheck plus the entity's assessment, or a security clearance; documented risk where a worker cannot meet it; proactive monitoring

A responsible entity for an enhanced-class asset must establish and maintain a process or system in its CIRMP to permit a critical worker access to critical components only where the worker has been assessed as suitable under s 9A(4), being either an AusCheck background check followed by the entity's own assessment of the s 9(5) matters, or a relevant security clearance (Negative Vetting 1 or higher) held when the person was identified as a critical worker, or, where the worker cannot meet those requirements, the CIRMP outlines the risk of employing the worker and the actions taken or to be taken as soon as reasonably practicable to minimise or eliminate it; and to proactively monitor, identify and act on developments or changes that may affect a critical worker's ongoing suitability. A worker whose clearance application is pending is assessed under the AusCheck limb until it is granted.