(1) If:
(a) a capability review of an Agency is undertaken under subsection 44A(1) or (3); and
(b) a written report of the review is given to the Agency Head of the Agency under subparagraph 44A(4)(c)(ii);
then the Agency Head must, within 90 days after the report is given to the Agency Head:
(c) prepare a written action plan that includes the Agency Head's response to the findings included in the report; and
(d) publish the action plan on an Agency website.
(2) However, the person who caused the capability review into the Agency to be undertaken may, by writing:
(a) authorise the Agency Head to remove specified material from the copy of the action plan that is published; or
(b) exempt the Agency Head from publishing the action plan;
if publishing the material or the action plan (as the case may be) would, or could reasonably be expected to, damage:
(c) the security of the Commonwealth; or
(d) the defence of the Commonwealth; or
(e) the international relations of the Commonwealth.