Undertakings shall document their assessments of risks and implemented and planned security measures. The King may issue regulations on documentation requirements. Section 4-5.Duty to give notice An undertaking shall notify the National Security Authority and other authorities tasked with performing supervision pursuant to section 3-1, second paragraph, immediately if a) it is affected by activities which present a threat to security b) it has a reasonable suspicion that activities which present a threat to security have affected or may affect the undertaking or other undertakings c) serious breaches of security requirements pursuant to Chapters 5, 6 or 7 have occurred . The undertaking shall notify the supervisory authority irrespective of any duty of secrecy if it gains knowledge of a planned or ongoing activity which may present a not insignificant risk of a threat to national security interests. The supervisory authority shall notify the National Security Authority without undue delay and forward the notification to the responsible ministry for assessment of a decision pursuant to section 2-5. The King may issue regulations on the duty to give notice pursuant to the second paragraph. Chapter 5. Information security Section 5-1.Critical national information Information is nationally critical if national security interests may be harmed if the information becomes known to unauthorised persons, is lost, is altered or becomes unavailable. Section 5-2.Protection of critical national information Undertakings shall ensure an appropriate level of security in relation to critical national information, so that the information a) does not become known to unauthorised persons b) is not lost or altered c) is available when there is an official need-to-know. 9/30