Critical Infrastructure Risk Management Program (CIRMP) Rules 2023
Part 2 enhanced requirements: additional material risks, cyber, credential, lateral movement, personnel, supply chain and physical (nine asset classes) – Critical Infrastructure Risk Management Program (CIRMP) Rules 2023

Critical Infrastructure Risk Management Program (CIRMP) Rules 2023 9A(5): s 9A(5) Enhanced suitability upkeep: AusCheck at least every five years for ongoing access, and clearance revalidation before lapse

What does 9A(5) require?

Where the CIRMP permits AusCheck background checks for enhanced-class suitability, each check must assess the s 9(3) information, be conducted under s 9(4) and, for a person requiring ongoing access to critical components, be conducted at least every five years; where suitability rests on a relevant security clearance, the entity must establish and maintain a process or system to ensure that before the clearance lapses or expires the person has undergone revalidation of the clearance or an AusCheck check with the entity's assessment.

Maintained by Gerard BlokdykControl text last updated

Other controls in Part 2 enhanced requirements: additional material risks, cyber, credential, lateral movement, personnel, supply chain and physical (nine asset classes) – Critical Infrastructure Risk Management Program (CIRMP) Rules 2023

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.