16. Codes of practice

issue or approve one or more codes of practice relating to —

practices and measures to be taken by licensees to ensure the security (including the physical security and cybersecurity) of the major foundational digital infrastructure services provided by the licensees;

practices and measures to be taken by licensees to minimise the likelihood of unexpected interruptions to the provision of the major foundational digital infrastructure services provided by the licensees;

plans for business continuity and disaster recovery of the major foundational digital infrastructure services provided by the licensees; and

the timeframe within which a notification to the Authority of the occurrence of any cybersecurity incident or service delivery disruption mentioned in section 15(d) should be provided; and

amend or revoke any code of practice issued or approved under paragraph (a).

may be of general or specific application; and

may specify that different provisions of the code of practice apply to different circumstances, or provide for different cases or classes of cases.

publish a notice of the issue, approval, amendment or revocation (as the case may be) in a manner that will secure adequate publicity for the issue, approval, amendment or revocation, as the case may be;

specify in the notice the date of the issue, approval, amendment or revocation, as the case may be; and

ensure that, so long as the code of practice remains in force, copies of that code, and of all amendments to that code, are available free of charge to a licensee to whom that code applies.

a code of practice;

an amendment to a code of practice;

a revocation of a code of practice.