Security of critical infrastructure Schedule 1 General amendments Part 1 Note: The rules may prescribe that a specified critical insurance asset is not a critical infrastructure asset (see section 9). critical liquid fuel asset has the meaning given by section 12A. Note: The rules may prescribe that a specified critical liquid fuel asset is not a critical infrastructure asset (see section 9). critical public transport asset means a public transport network or system that: (a) is managed by a single entity; and (b) is capable of handling at least 5 million passenger journeys per month; but does not include a critical aviation asset. Note: The rules may prescribe that a specified critical public transport asset is not a critical infrastructure asset (see section 9). critical superannuation asset has the meaning given by section 12J. Note: The rules may prescribe that a specified critical superannuation asset is not a critical infrastructure asset (see section 9). critical telecommunications asset means: (a) a telecommunications network that is: (i) owned or operated by a carrier; and (ii) used to supply a carriage service; or (b) a telecommunications network, or any other asset, that is: (i) owned or operated by a carriage service provider; and (ii) used in connection with the supply of a carriage service. Note: The rules may prescribe that a specified critical telecommunications asset is not a critical infrastructure asset (see section 9). cyber security incident has the meaning given by section 12M. data includes information in any form. data storage means data storage that involves information technology, and includes data back-up. data storage device means a thing (for example, a disk or file server) containing (whether temporarily or permanently), or designed to contain (whether temporarily or permanently), data for use by a computer. No. 124, 2021 Security Legislation Amendment (Critical Infrastructure) Act 2021 Authorised Version C2021A00124 13

Select target paragraph3