(d) after giving reasonable notice to the owner or occupier of any premises, enter those premises if the incident response officer reasonably suspects that there is within the premises a computer or computer system that is or was affected by the cybersecurity incident; (e) access, inspect and check the operation of a computer or computer system that the incident response officer has reasonable cause to suspect is or was affected by the cybersecurity incident, or use or cause to be used any such computer or computer system to search any data contained in or available to such computer or computer system; (f) perform a scan of a computer or computer system to detect cybersecurity vulnerabilities in the computer or computer system; (g) take a copy of, or extracts from, any electronic record or computer program contained in a computer that the incident response officer has reasonable cause to suspect is or was affected by the cybersecurity incident; (h) subject to subsection (5), with the consent of the owner, take possession of any computer or other equipment for the purpose of carrying out further examination or analysis. (3) A cybersecurity threat or incident satisfies the severity threshold mentioned in subsection (1) if — (a) it creates a risk of significant harm being caused to a critical information infrastructure; (b) it creates a risk of disruption to the provision of an essential service; (c) it creates a threat to the national security, defence, foreign relations, economy, public health, public safety or public order of Singapore; or (d) the cybersecurity threat or incident is of a severe nature, in terms of the severity of the harm that may be caused to persons in Singapore or the number of computers or value of the information put at risk, whether or not the computers or computer systems put at risk are themselves critical information infrastructure. (4) An incident response officer exercising the power mentioned in subsection (2)(e) may require any assistance the incident response officer needs to gain such access from — (a) any person whom the incident response officer reasonably suspects uses or has used the computer or computer system; or Singapore Statutes Online Published in Acts Supplement on 12 Mar 2018 PDF created date on: 30 Aug 2022