ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
21. Failure to implement directives.
Edition: 2024-02-16 · In force
21. Failure to implement directives.
(1)The Director shall upon expiry of the timelines where the owner has failed to implement the directives, issue a notice to show cause to the owner of critical information infrastructure.(2)The Director may upon providing the owner of a critical information infrastructure with the opportunity to be heard in accordance with the Fair Administrative Action Act (Cap. 7L), may enter into an implementation plan with the owner of the critical information infrastructure and where applicable order for suitable actions or administrative sanctions to be impose against the owner of a critical information infrastructure.(3)The suitable actions or administrative actions contemplated under paragraph (1) may include-(a)requirement to provide a detailed report on non-compliance to the National Security Council;(b)recommendation to the respective sector Regulator to impose specifications under their respective law;(c)constitution of a multi-agency committee to implement the directives;(d)full implementation of the directives by the Director; or(e)recommendations to conduct investigations by the law enforcement agencies.(4)Where an owner of a critical information infrastructure is dissatisfied with the decisions of the Committee, the owner may appeal to the High Court.