Part 3Network security
Process for preventing or mitigating network security risks
50Consideration of network security risk by Director or Minister
When considering whether a network security risk or significant network security risk is raised under this Part, the Director, or if the case requires, the Minister responsible for the Government Communications Security Bureau,—
- must consider the likelihood that the matter giving rise to the risk will lead to—
- the compromising or degrading of the public telecommunications network; and
- the impairment of the confidentiality, availability, or integrity of telecommunications across the network; and
- the compromising or degrading of the public telecommunications network; and
- must consider the potential effect that an event described in paragraph (a)(i) or (ii) will have on the provision of—
- central or local government services:
- services within the finance sector:
- services within the energy sector:
- services within the food sector:
- communication services:
- transport services:
- health services:
- education services; and
- central or local government services:
- may consider any other matter that the Director or Minister considers relevant.
In subsection (1)(a), the matter giving rise to the risk means—
- any proposed decision, course of action, or change that, if implemented, will give rise to the network security risk or significant network security risk; or
- any decision that has been implemented, binding legal arrangement, or course of action or change that has commenced that gives rise to the network security risk or significant network security risk.


