wellbeing of citizens of Malawi. The Part also provides for the registration of critical information
infrastructure, and the withdrawal of the designation of critical information infrastructure. The Part
further provides for the duties of owners of critical information infrastructure, access to critical
information infrastructure, and the localization of critical data.
Part VI provides for the duty to report a cybersecurity incident to the relevant sectoral
CERT where a particular sector has experienced a cybersecurity incident. The Part also provides
for the establishment, by the Malawi CERT, of a cybersecurity incident point of contact in order
to facilitate the reporting of cybersecurity incidents by the general public, and for international cooperation in cybersecurity matters. The Part further provides for the establishment, by the
Authority, of an early warning system in respect of human initiated risks that are likely to
undermine the cybersecurity of the country.
Part VII contains miscellaneous provisions. Specifically, the Part gives the Minister the
power to make regulations, on the advice of the Authority, for carrying out or giving effect to the
provisions of the Act and for such matters as are envisaged by the provisions of the Act or as the
Authority may deem necessary.
3