Cybersecurity Act · 2024 Revised Edition · Part · Administration
5. Appointment of Commissioner of Cybersecurity and other officers
Official textFrom Attorney General's Chambers, unchanged
The Minister may, with the consent of His Majesty the Sultan and
Yang Di-Pertuan, appoint a Commissioner of Cybersecurity for the purposes of this Act.
Commissioner
“Commissioner” means the Commissioner of Cybersecurity appointed under section 5(1);
Subject to any general or special direction of the Minister, the
Commissioner is responsible for the administration of this Act and may perform such duties and functions as are imposed and exercise such powers as are conferred on the Commissioner by this Act.
Cybersecurity 12
cybersecurity
“cybersecurity” means the state in which a computer or computer system is protected from unauthorised access or attack, and because of that state — (a) the computer or computer system continues to be available and operational; (b) the integrity of the computer or computer system is maintained; and (c) the integrity and confidentiality of information stored in, processed by or transmitted through the computer or computer system is maintained;
The Minister may, with the consent of His Majesty the Sultan and
Yang Di-Pertuan, appoint a Deputy Commissioner of Cybersecurity and one or more Assistant Commissioners of Cybersecurity to assist the
Deputy Commissioner
“Deputy Commissioner” means the Deputy Commissioner of Cybersecurity appointed under section 5(3);
Commissioner in the discharge of the Commissioner’s duties and functions.
The Minister may, with the consent of His Majesty the Sultan and
Yang Di-Pertuan, appoint as an Assistant Commissioner under subsection (3)
Assistant Commissioner
“Assistant Commissioner” means any Assistant Commissioner of Cybersecurity appointed under section 5(3);
in respect of a critical information infrastructure —
critical information infrastructure
“critical information infrastructure” means a computer or a computer system in respect of which a designation under section 9(1) is in effect;
a public officer of another Ministry; or
an employee of a statutory body under the charge of another
Minister, where that other Ministry or statutory body has supervisory or regulatory responsibility over an industry or a sector to which the owner of the critical information infrastructure belongs.
The Commissioner may, in writing, appoint such number of persons as cybersecurity officers as the Commissioner thinks necessary for carrying this Act into effect.
The Deputy Commissioner may exercise all the powers, duties and functions of the Commissioner except those exercisable under section 9
or 11.
Subject to such conditions or limitations as the Commissioner may specify, an Assistant Commissioner or a cybersecurity officer may exercise all the powers, duties and functions of the Commissioner as may be delegated to that Assistant Commissioner or cybersecurity officer in writing, except —
cybersecurity officer
“cybersecurity officer” means any cybersecurity officer appointed under section 5(5);
in the case of an Assistant Commissioner, those powers, duties or functions exercisable under this subsection or section 7, 9, 11
or 22(5); and
in the case of a cybersecurity officer, those powers, duties or functions exercisable under this subsection or section 7, 9, 11, 13, 14
or 22(5).
Cybersecurity 13
Terms defined in s 2
Assistant Commissioner
Defined · s 2“Assistant Commissioner” means any Assistant Commissioner of Cybersecurity appointed under section 5(3);
Commissioner
Defined · s 2“Commissioner” means the Commissioner of Cybersecurity appointed under section 5(1);
critical information infrastructure
Defined · s 2“critical information infrastructure” means a computer or a computer system in respect of which a designation under section 9(1) is in effect;
cybersecurity
Defined · s 2“cybersecurity” means the state in which a computer or computer system is protected from unauthorised access or attack, and because of that state — (a) the computer or computer system continues to be available and operational; (b) the integrity of the computer or computer system is maintained; and (c) the integrity and confidentiality of information stored in, processed by or transmitted through the computer or computer system is maintained;
cybersecurity officer
Defined · s 2“cybersecurity officer” means any cybersecurity officer appointed under section 5(5);
Deputy Commissioner
Defined · s 2“Deputy Commissioner” means the Deputy Commissioner of Cybersecurity appointed under section 5(3);
owner
Defined · s 2“owner”, in relation to a critical information infrastructure, means the legal owner of the critical information infrastructure and, where the critical information infrastructure is jointly owned by more than one person, includes every joint owner;
Part
Critical Information Infrastructure
Part
Responses to Cybersecurity Threats and Incidents
Part