Security of Critical Infrastructure Act 2018 (SOCI) s30AKA: Have regard to the prescribed matters when adopting, reviewing or varying the program

In deciding whether to adopt a program, when reviewing it, and in deciding whether to vary it, the responsible entity must have regard to the matters set out in the rules (for example, under the CIRMP Rules and the Telecommunications rules: operational context, interdependencies, responsible positions and contacts, risk methodology, critical workers, major suppliers, physical critical components and security arrangements). A program may be varied or its adoption revoked and replaced (ss 30AJ, 30AK).