Official Gazette, 79/2007 (3) The Office of the National Security Council shall adopt the Ordinance to stipulate criteria for forming the positions of information security advisors referred to in paragraph 2 of this Article Article 26 (1) Information security advisor shall submit their report on the results of implemented oversight to the Head of body or legal person and to the NSA. (2) NSA, based on the report referred to in paragraph 1 of this Article, is authorised to: - give instructions for the purpose of eliminating determined defects and irregularities that the bodies and legal persons under oversight must eliminate within the designated period of time - implement the procedure of assessment of the further validity of information systems security accreditation - implement the procedure of determining responsibility - take other measures and actions for which it has authorisation by separate provisions. (3) The Head of the body or legal person shall take measures for eliminating defects determined during the oversight implementation VIII TRANSITIONAL AND FINAL PROVISIONS Article 27 The Regulation referred to in Article 7 of this Act shall be adopted by the Government of the Republic of Croatia within 3 months from the date when this Act enters into force. Article 28 (1) The Ordinances referred to in Article 15, paragraph 1 of this Act shall be adopted by the Office of the National Security Council within 6 months from the date when this Act enters into force. (2) The Ordinance referred to in Article 25, paragraph 3 of this Act shall be adopted by the Office of the National Security Council within 6 months from the date when this Act enters into force. (3) The Ordinance referred to in Article 18, paragraph 1 of this Act shall be adopted by the Information Systems Security Bureau within 30 days from the day when the Ordinance referred to in paragraph 1 of this Article enters into force. Article 29 (1) CARNet shall harmonize its Statute and deliver it to the Office of the National Security Council for approval within 3 months from the date when this Act enters into force. (2) The Ordinances referred to in Article 24, paragraphs 1 and 2 of this Act shall be adopted within 9 months from the date when this Act enters into force. 8