Regulations

(1) The Cabinet Secretary may make regulations generally for the better carrying into effect of any provisions under this Act.
(2) Without prejudice to the foregoing, regulations made under this section may provide for —
(a) designation of computer systems, networks, programs, data as national critical information infrastructure;
(b) protection, preservation and management of critical information infrastructure;
(c) access to, transfer and control of data in any critical information infrastructure;
(d) storage and archiving of critical data or information;
(e) audit and inspection of national critical information infrastructure;
(f) recovery plans in the event of disaster, breach or loss of national critical information infrastructure or any part of it;
(g) standard operating procedures for the conduct, search, seizure and collection of electronic evidence; and
(h) mutual legal assistance.
(3) For the purposes of Article 94 (6) of the Constitution—
(a) the purpose and objective of delegation under this section is to enable the Cabinet Secretary to make regulations to provide for the better carrying into effect of the provisions of this Act and to enable the Authority to discharge its functions more effectively;
(b) the authority of the Cabinet Secretary to make regulations under this Act will be limited to bringing into effect the provisions of this Act and to fulfil the objectives specified under this section;
(c) the principles and standards applicable to the regulations made under this section are those set out in the Interpretation and General Provisions Act (Cap. 2) and the Statutory Instruments Act, 2013 (No. 23 of 2013).