commits an offence and shall, upon conviction, be liable to a fine of K10,000,000 and
imprisonment for seven years.
(2) For the proper performance of his functions and powers under this Act, a cyber
inspector may be accompanied by a police officer.
PART IV - CYBERSECURITY STANDARDS AND ENFORCEMENT
Cybersecurity
standards
16. - (1) The Authority shall develop, establish and adopt standards in the cybersecurity
space for governance and risk management and any other relevant area that the Authority
may determine in accordance with international best practices.
(2) The Authority shall publish on its website the standards developed and promote their
adoption by the public and private sectors.
(3) The Authority shall take the necessary measures to enforce the cybersecurity standards
adopted and monitor compliance by the public and private sectors.
(4) A person who fails to comply with the cybersecurity standards is liable to pay to the
Authority the administrative penalty specified in the Schedule.
Certificate
of
compliance
17. A cyber inspector shall issue a certificate of compliance where he is satisfied that the
standards set by the Authority from time to time have been met.
PART V - CRITICAL INFORMATION INFRASTRUCTURE
Designation
of
critical
information
infrastructure
18. - (1) The Minister may, on the advice of the Authority, designate a computer system
or computer network as a critical information infrastructure if the Minister considers that
the computer system or computer network is essential for –
(a) national security, or
(b) the economic and social wellbeing of citizens.
17