6. Prescribed cybersecurity incidents for purposes of section 16I(4) of Act

For the purposes of section 16I(4)(a), (b) and (c) of the Act, the following incidents are prescribed cybersecurity incidents in respect of a relevant computer or computer system:

any unauthorised hacking of the relevant computer or computer system to gain unauthorised access to or control of the relevant computer or computer system;

any installation or execution of unauthorised software, or computer code, of a malicious nature on the relevant computer or computer system;

any man‑in‑the‑middle attack, session hijack or other unauthorised interception by means of a computer or computer system of communication between the relevant computer or computer system, and an authorised user of the relevant computer or computer system;

any denial of service attack or other unauthorised act or acts carried out through a computer or computer system that adversely affects the availability or operability of the relevant computer or computer system.