ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
40. Register of persons accessing critical information infrastructure.
Edition: 2024-02-16 · In force
40. Register of persons accessing critical information infrastructure.
An owner of a critical information infrastructure shall keep and maintain an up-to-date register of persons having access to a critical information infrastructure.(2)The register contemplated under paragraph (1) shall specify-(a)the identification particulars of the person granted access to a critical information infrastructure including their nationality;(b)reason for accessing the critical information infrastructure;(c)the duration of the authorization and restrictions applicable to the authorized access of the critical information infrastructure;(d)any archived data on the critical information infrastructure system or data; and(e)any other requirements that the owner of a critical information infrastructure may from time to time determine.(3)The Director, may request the owner of a critical information infrastructure to periodically or at any time as may be necessary, —(a)examine the register, where there is a disruption or potential disruption of the system or any other circumstances that seeks to compromise the integrity of the critical information infrastructure; or(b)request for extracts of the register,for purposes of auditing compliance with under the Act and these Regulations.