Cybersecurity Act · 2024 Revised Edition · Part · Administration
6. Duties and functions of Commissioner
Official textFrom Attorney General's Chambers, unchanged
The Commissioner has the following duties and functions —
Commissioner
“Commissioner” means the Commissioner of Cybersecurity appointed under section 5(1);
to oversee and promote the cybersecurity of computers and computer systems in Brunei Darussalam;
cybersecurity
“cybersecurity” means the state in which a computer or computer system is protected from unauthorised access or attack, and because of that state — (a) the computer or computer system continues to be available and operational; (b) the integrity of the computer or computer system is maintained; and (c) the integrity and confidentiality of information stored in, processed by or transmitted through the computer or computer system is maintained;
to advise the Government or any other public authority on national needs and policies in respect of cybersecurity matters generally;
to monitor cybersecurity threats, whether such cybersecurity threats occur in or outside Brunei Darussalam;
to respond to cybersecurity incidents that threaten the national security, defence, economy, foreign relations, public health, public order or public safety, or any essential services, of
Brunei Darussalam, whether such cybersecurity incidents occur in or outside Brunei Darussalam;
to identify and designate critical information infrastructure and to regulate owners of critical information infrastructure with regard to the cybersecurity of the critical information infrastructure;
critical information infrastructure
“critical information infrastructure” means a computer or a computer system in respect of which a designation under section 9(1) is in effect;
to establish cybersecurity codes of practice and standards of performance for implementation by owners of critical information infrastructure;
to represent the Government on cybersecurity issues internationally;
to cooperate with computer emergency response teams
computer
“computer” means an electronic, magnetic, optical, electrochemical or other data processing device performing logical, arithmetic or storage functions, and includes any data storage facility or communications facility directly related to or operating in conjunction with such device, but does not include such device as the Minister may, by notification published in the Gazette, prescribe;
(CERTs) of other countries or territories on cybersecurity incidents;
to develop and promote the cybersecurity services industry in
Brunei Darussalam;
to establish standards within Brunei Darussalam in relation to cybersecurity products or services and the recommended level of cybersecurity of computer hardware or software, including certification or accreditation schemes;
Cybersecurity 14
to promote, develop, maintain and improve competencies and professional standards of persons working in the field of cybersecurity;
to support the advancement of technology and research and development relating to cybersecurity;
to promote awareness of the need for and the importance of cybersecurity in Brunei Darussalam;
to perform such other functions and discharge such other duties as may be conferred on the Commissioner under any other written law.
Terms defined in s 2
Commissioner
Defined · s 2“Commissioner” means the Commissioner of Cybersecurity appointed under section 5(1);
computer
Defined · s 2“computer” means an electronic, magnetic, optical, electrochemical or other data processing device performing logical, arithmetic or storage functions, and includes any data storage facility or communications facility directly related to or operating in conjunction with such device, but does not include such device as the Minister may, by notification published in the Gazette, prescribe;
critical information infrastructure
Defined · s 2“critical information infrastructure” means a computer or a computer system in respect of which a designation under section 9(1) is in effect;
cybersecurity
Defined · s 2“cybersecurity” means the state in which a computer or computer system is protected from unauthorised access or attack, and because of that state — (a) the computer or computer system continues to be available and operational; (b) the integrity of the computer or computer system is maintained; and (c) the integrity and confidentiality of information stored in, processed by or transmitted through the computer or computer system is maintained;
Part
Critical Information Infrastructure
Part
Responses to Cybersecurity Threats and Incidents
Part