(1) The powers and functions of the Organisation under this Part may be exercised or performed on behalf of the Organisation by the Director - General.
Note: See section 16 for the Director - General's power to delegate powers and functions under this subsection.
(2) The Director - General must ensure that the Organisation has policies and procedures in place in relation to the exercise of a power or the performance of a function under this Part, including policies and procedures for the following:
(a) undertaking security vetting of a person;
(b) making security clearance suitability assessments and security clearance decisions.
(3) If a policy or procedure referred to in subsection (2) is in writing, the policy or procedure is not a legislative instrument.