14. Duty to report cybersecurity incident in respect of provider‑owned critical information infrastructure, etc.

Terms defined in s 2

• code of practice

  code of practice

  Defined · s 2

  “code of practice” means any code of practice issued or approved under section 35A(1), and includes such a code of practice as may be amended from time to time;

  Open s 2
• Commissioner

  Commissioner

  Defined · s 2

  “Commissioner” means the Commissioner of Cybersecurity appointed under section 4(1)(a);

  Open s 2
• computer

  computer

  Defined · s 2

  “computer” means an electronic, magnetic, optical, electrochemical, or other data processing device performing logical, arithmetic, or storage functions, and includes any data storage facility or communications facility directly related to or operating in conjunction with such device, but does not include such device as the Minister may, by notification in the Gazette, prescribe;

  Open s 2
• computer system

  computer system

  Defined · s 2

  “computer system” means an arrangement of interconnected computers that is designed to perform one or more specific functions, and includes —(a)an information technology system; and(b)an operational technology system such as an industrial control system, a programmable logic controller, a supervisory control and data acquisition system, or a distributed control system;

  Open s 2
• cybersecurity

  cybersecurity

  Defined · s 2

  “cybersecurity” means the state in which a computer or computer system is protected from unauthorised access or attack, and because of that state —(a)the computer or computer system continues to be available and operational;(b)the integrity of the computer or computer system is maintained; and(c)the integrity and confidentiality of information stored in, processed by or transmitted through the computer or computer system is maintained;

  Open s 2
• cybersecurity incident

  cybersecurity incident

  Defined · s 2

  “cybersecurity incident” means an act or activity carried out without lawful authority on or through a computer or computer system that jeopardises or adversely affects its cybersecurity or the cybersecurity of another computer or computer system;

  Open s 2
• provider‑owned critical information infrastructure

  provider‑owned critical information infrastructure

  Defined · s 2

  “provider‑owned critical information infrastructure” means a computer or a computer system in respect of which a designation under section 7(1) or (1A) is in effect;

  Open s 2