Cybersecurity Act · 2024 Revised Edition · Part · Critical Information Infrastructure
18. Cybersecurity exercises
Official textFrom Attorney General's Chambers, unchanged
The Commissioner may conduct cybersecurity exercises for the purpose of testing the state of readiness of owners of different critical information infrastructure in responding to significant cybersecurity incidents.
Commissioner
“Commissioner” means the Commissioner of Cybersecurity appointed under section 5(1);
An owner of a critical information infrastructure shall participate in a cybersecurity exercise if directed in writing to do so by the
owner
“owner”, in relation to a critical information infrastructure, means the legal owner of the critical information infrastructure and, where the critical information infrastructure is jointly owned by more than one person, includes every joint owner;
Commissioner.
Any person who, without reasonable excuse, fails to comply with a direction under subsection (2) is guilty of an offence and liable on conviction to a fine not exceeding $100,000.
Terms defined in s 2
Commissioner
Defined · s 2“Commissioner” means the Commissioner of Cybersecurity appointed under section 5(1);
critical information infrastructure
Defined · s 2“critical information infrastructure” means a computer or a computer system in respect of which a designation under section 9(1) is in effect;
cybersecurity
Defined · s 2“cybersecurity” means the state in which a computer or computer system is protected from unauthorised access or attack, and because of that state — (a) the computer or computer system continues to be available and operational; (b) the integrity of the computer or computer system is maintained; and (c) the integrity and confidentiality of information stored in, processed by or transmitted through the computer or computer system is maintained;
owner
Defined · s 2“owner”, in relation to a critical information infrastructure, means the legal owner of the critical information infrastructure and, where the critical information infrastructure is jointly owned by more than one person, includes every joint owner;
Part
Responses to Cybersecurity Threats and Incidents
Part