(d) minimizing harmful effect. Application of this Act 5. This Act shall not apply to (a) personal data protection; (b) cybercrime offences and criminal procedural powers; (c) electronic identity; (d) electronic commerce; and (e) classified information and its processing. PART II — CYBERSECURITY GOVERNANCE Establishment of Malawi CERT 6. - (1) There is hereby established the Malawi CERT which shall be a unit under the Authority. (2) The Malawi CERT shall take charge of its information infrastructure protection actions and serve as a base for national coordination to respond to information and communication technology security threats. (3) The Authority shall ensure that the Malawi CERT is capable of providing reactive and proactive services, communicating timely information on recent relevant threats and, whenever necessary, assist in responding to cyber incidents. Functions of Malawi CERT 7. – (1) The Malawi CERT shall carry out the following functions – (a) advising Government Ministries, Departments and Agencies on all matters related to cybersecurity in Malawi; (b) promoting the security of computers and computer systems in Malawi; (c) monitoring cybersecurity threats within and outside Malawi; (d) establishing codes of practice and standards for cybersecurity, and monitoring compliance with the codes of practice and standards by the public and private sector owners of critical information infrastructure; (e) in consultation with the Malawi Bureau of Standards, establishing standards for certifying cybersecurity products or services; 10