(4) To ensure availability, the Malawi CERT shall maintain multiple communication channels and make them known to its partners. (5) The Malawi CERT shall utilize an appropriate system for managing and routing requests. (6) The Authority shall charge fees for services provided by the Malawi CERT as determined by the Authority. Classification of incidents 8. The Malawi CERT may prescribe standardized practices and classification schemes, related to incident handling, crisis management, and coordinated vulnerability disclosure. Sectoral CERTS 9. - (1) For purposes of achieving effective cybersecurity incident coordination, the Malawi CERT shall facilitate the establishment of a sectoral CERT. (2) When facilitating the establishment of a sectoral CERT, the Malawi CERT shall (a) consider (i) the needs and criticality of a sector; and (ii) developments in respect of cybersecurity in Malawi; (b) prescribe – (i) the reporting obligation of the sectoral CERT; (ii) the penalty for non-compliance to the reporting obligation; and (iii) the need to adhere to risk management protocols. (3) A sector shall be responsible for the cost of establishing its sectoral CERT and for the operational costs of the sectoral CERT. Functions of a sectoral CERT 10. - (1) A sectoral CERT shall (a) collect and collate cybersecurity incidents within its sector and, within five days, report the incidents to the Malawi CERT; 13

Select target paragraph3