A responsible entity for assets excluded from Part 2A by s 30AB(4), (5) or (6) (hosting certification or a specified law) must, within 90 days after each financial year, give the relevant Commonwealth regulator or the Secretary a report in the approved form, approved by its governing body, setting out why the assets are excluded and, for any hazard with a significant relevant impact during the year, identifying it and evaluating the effectiveness of the mitigating action taken.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.