15. Duty to take measures to ensure security and resilience of major foundational digital infrastructure service

A licensee must, in relation to the major foundational digital infrastructure service that is the subject of the major FDI licence —

implement such processes and measures to ensure the security (including the physical security and cybersecurity) of the service, as may be prescribed;

implement such processes and measures to minimise the likelihood of unexpected interruptions to the provision of the service, as may be prescribed;

implement such business continuity and disaster recovery plans to ensure timely resumption of the service from interruptions to the licensee’s business activities and processes, as may be prescribed; and

notify the Authority, in the prescribed form and manner, of the occurrence of such cybersecurity incident, or service delivery disruption, as may be prescribed.