“cybersecurity policy” means a formal set of rules enforced in order to protect the information and computer system; “cyber extortion” means a form of cybercrime which occurs when a person uses the internet to demand money or other goods or behaviour from another person by threatening to inflict harm to his person, reputation, or property; “device” – (a) means a unit of physical or virtual hardware or equipment that provides one or more computing functions; and (b) includes – (i) a computer program, code, software or an application; (ii) a component of a computer system such as, but not limited to a graphic card, memory card, chip or processor; (iii) computer storage component; or (iv) an input and/or output device; “electronic communication” means the transfer of a sign, signal or computer data of any nature, transmitted in whole or in part by an electrical, digital, magnetic, electromagnetic, optical, wire, wireless, radio, photo electronic or photo optical system or any other similar form; “fake profile” means an untrue online representation, existent or nonexistent; “function” includes logic, control, arithmetic, deletion, storage and retrieval and communication to, from or within a computer system; “Global Action on Cybercrime Extended project” refers to the Council of Europe��s Glacy project designed to strengthen the capacities of States worldwide on the application of cybercrime legislation and electronic evidence, and of which Mauritius is a priority country; “harm” includes physical, sexual, psychological, emotional or moral abuse, injury, neglect, ill-treatment, degradation, discrimination, exploitation or impairment of health or development; “information and communication technologies” has the same meaning as in the Information and Communication Technologies Act; 5