ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
20. Directives upon designation.
Edition: 2024-02-16 · In force
20. Directives upon designation.
(1)The Director shall, within thirty days of issuing the notice under regulation 19, issue directives contemplated under section 9(4) of the Act to the owner of critical information infrastructure.(2)Without prejudice to the generality of paragraph (1) and in addition to the directives specified under section 9(4) of the Act, the Director may direct the owner critical information infrastructure to-(a)conduct annual risk assessment;(b)develop incidence response plans;(c)implement suitable security measures; and(d)ensure personnel are adequately trained in security best practices.