(4) To ensure availability, the Malawi CERT shall maintain multiple communication
channels and make them known to its partners.
(5) The Malawi CERT shall utilize an appropriate system for managing and routing
requests.
(6) The Authority shall charge fees for services provided by the Malawi CERT as
determined by the Authority.
Classification
of incidents
8. The Malawi CERT may prescribe standardized practices and classification
schemes, related to incident handling, crisis management, and coordinated vulnerability
disclosure.
Sectoral
CERTS
9. - (1) For purposes of achieving effective cybersecurity incident coordination, the
Malawi CERT shall facilitate the establishment of a sectoral CERT.
(2) When facilitating the establishment of a sectoral CERT, the Malawi CERT shall (a) consider (i) the needs and criticality of a sector; and
(ii) developments in respect of cybersecurity in Malawi;
(b) prescribe –
(i) the reporting obligation of the sectoral CERT;
(ii) the penalty for non-compliance to the reporting obligation; and
(iii) the need to adhere to risk management protocols.
(3) A sector shall be responsible for the cost of establishing its sectoral CERT and for
the operational costs of the sectoral CERT.
Functions
of
a
sectoral
CERT
10. - (1) A sectoral CERT shall (a) collect and collate cybersecurity incidents within its sector and, within five
days, report the incidents to the Malawi CERT;
13