ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
18. Designation of critical infrastructure.
Edition: 2024-02-16 · In force
18. Designation of critical infrastructure.
(1)Pursuant to section 9 of the Act, the Director shall in designating a system as a critical infrastructure -(a)identify the system being designated as a critical information infrastructure;(b)identify the owner of a critical information infrastructure;(c)inform the owner of critical information infrastructure of his responsibilities under the Act and these Regulations; and(d)provide the owner of critical information infrastructure with particulars of the requirement to designate a chief information security officer to provide the requisite technical support to the organization.(2)The Director shall designate a critical information infrastructure in the manner specified in the Act and these Regulations.(3)The criteria under section 9 (2) of the Act shall guide the classification of a critical information infrastructure.(4)Subject to paragraph (5), the details of information specified under paragraphs (1) and (2) shall be published in the Gazette notice contemplated under section 9 (1) of the Act.(5)The publication of designated critical information infrastructure in the Kenya Gazette as contemplated under section 9 (1) of the Act shall not include exempt information envisaged under section 6 of the Access to Information Act (Cap. 7M),