(1) The staff assisting the Cyber Incident Review Board are to be APS employees, or officers or employees of a Commonwealth body, whose services are made available to the Board in connection with the performance of any of the Board's functions or the exercise of any of the Board's powers.
(2) When performing services for the Board, the staff are subject to the directions of the Board.