Communications Regulation and Digital Hub Development Agency (Amendment) Act 2023

Security audits

15. (1) Where the Commission serves a security measures direction on a provider requiring the provider to submit to a security audit the Commission may appoint such member of the staff of the Commission, or such other suitably qualified independent person as the Commission considers appropriate,(referred to in this section as a “security auditor”) to carry out the security audit in accordance with the direction.

(2) A security auditor shall, on his or her appointment, be provided by the Commission with a certificate of his or her appointment and when exercising a power referred to in subsection (3) shall, if requested by any person thereby affected, produce such certificate to that person for inspection.

(3) Where the Commission serves a security measures direction on a provider requiring the provider to submit to a security audit a security auditor may, for the purposes of carrying out the audit, exercise any power exercisable by an authorised officer under the Principal Act (other than a power exercisable for a purpose specified in section 39(3A) of the Principal Act) and where a security auditor exercises such a power a reference to an authorised officer exercising such a power in the Principal Act shall include a reference to the security auditor.