Electronic Transactions (Certification Authority) Regulations 2010 · 2025 Revised Edition · Part 5 · Conduct of Business by Accredited Certification Authorities
24. Incident handling
Feedback & supportAn accredited certification authority must implement an incident management plan that must provide at the least for management of the following incidents: (a)compromise of key;
penetration of certification authority system and network;
unavailability of infrastructure;
fraudulent registration and generation of certificates, certificate suspension and revocation information.
If any incident mentioned in paragraph (1) occurs, it must be reported to the Controller within 24 hours.
Subregulation 1
An accredited certification authority must implement an incident management plan that must provide at the least for management of the following incidents: (a)compromise of key;
penetration of certification authority system and network;
unavailability of infrastructure;
fraudulent registration and generation of certificates, certificate suspension and revocation information.
Subregulation 2
If any incident mentioned in paragraph (1) occurs, it must be reported to the Controller within 24 hours.