Skip to content
In forceAmended2020 Revised Edition

Part 3 · Provider-Owned Critical Information Infrastructure

16. Cybersecurity exercises

Feedback & support
Amended

Last amended by an amending law of 2024.

(1)

The Commissioner may conduct cybersecurity exercises for the purpose of testing the state of readiness of owners of different provider-owned critical information infrastructure in responding to significant cybersecurity incidents.

(2)

An owner of a provider-owned critical information infrastructure must participate in a cybersecurity exercise if directed in writing to do so by the Commissioner.

(3)

Any person who, without reasonable excuse, fails to comply with a direction under subsection (2) shall be guilty of an offence and shall be liable on conviction to a fine not exceeding $100,000.

Report

Part 3A

Providers of Essential Service Responsible for Cybersecurity of Third‑Party‑Owned Critical Information Infrastructure

Part 3B

Systems of Temporary Cybersecurity Concern

Part 4

Responses to Cybersecurity Threats and Incidents

Part 5

Cybersecurity Service Providers

Part 6

General

Schedules