S.L. 460.24 Art. 6Operator security plans.

(1) The operator security plan ("OSP") procedure shall -

(a) identify the CI and ECI assets located in Malta;

(b) identify the security solutions that exist or are being implemented for their protection; and

(c) cover, as a minimum, the information set out in article 7.

(2) The Department shall assess whether each designated CI and ECI located in Malta possesses an OSP or has in place equivalent measures addressing the issues identified in article 7.

(3) If the Department finds that an OSP or equivalent measures have not been prepared, it shall ensure, by any measures deemed appropriate, that the OSP or equivalent measures are prepared addressing the issues identified in article 7: (IDENTIFICATION, DESIGNATION AND PROTECTION) [

Provided that, where supervisory or oversight arrangements already exist in relation to a CI or an ECI located in Malta, such arrangements are not affected by the provisions of this article and the Department shall be the supervisor under those existing arrangements: Provided further that compliance with any measure, including a European Union measure, which in a particular sector requires, or refers to a need to have, a plan similar or equivalent to an OSP and oversight by the Department of such a plan, shall be deemed to satisfy all the requirements under this article.

(4) The Department shall ensure that the OSP or equivalent measures pursuant to this article are in place and are reviewed regularly within one year following designation of each CI and each ECI:

Provided that the said period may be extended in exceptional circumstances, and the Department shall notify the European Commission of any extension granted in relation to an ECI pursuant to this sub-article.