Within 90 days after the end of each financial year the entity must give the Secretary (or the relevant Commonwealth regulator) a report in the approved form, approved by its board, council or governing body, stating whether the program was up to date at year end, identifying any hazard that had a significant relevant impact and evaluating the program's effectiveness against it and any variation, and any s 30AI direction and the variation made. For critical telecommunications assets the report must also summarise the changes notified under s 30EC(2), describe the risks the Secretary advised under s 30ED(3)(c), describe the measures adopted to eliminate or reduce advised risks in that or any previous period, and evaluate their effectiveness (s 30AG(2)(da)). Civil penalty 150 penalty units.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.