Cybersecurity Act 2018 · 2020 Revised Edition · Part 3 · Provider-Owned Critical Information Infrastructure
16. Cybersecurity exercises
Feedback & supportLast amended by an amending law of 2024.
The Commissioner may conduct cybersecurity exercises for the purpose of testing the state of readiness of owners of different provider-owned critical information infrastructure in responding to significant cybersecurity incidents.
Commissioner
“Commissioner” means the Commissioner of Cybersecurity appointed under section 4(1)(a);
An owner of a provider-owned critical information infrastructure must participate in a cybersecurity exercise if directed in writing to do so by the Commissioner.
cybersecurity
“cybersecurity” means the state in which a computer or computer system is protected from unauthorised access or attack, and because of that state —(a)the computer or computer system continues to be available and operational;(b)the integrity of the computer or computer system is maintained; and(c)the integrity and confidentiality of information stored in, processed by or transmitted through the computer or computer system is maintained;
Any person who, without reasonable excuse, fails to comply with a direction under subsection (2) shall be guilty of an offence and shall be liable on conviction to a fine not exceeding $100,000.