No. 33
Electronic Transactions
PART II__ADMINISTRATION
6.__(1) There is hereby established the Malawi CERT which shall
be a unit under the Authority.
(2) The Malawi CERT shall take charge of its information
infrastructure protection actions and serve as a base for national
coordination to respond to information and communication
technology security threats.
11
Establishment
of the Malawi
CERT
(3) The Authority shall ensure that the Malawi CERT is capable
of providing reactive and proactive services, communicating timely
information on recent relevant threats and, whenever necessary,
bringing its assistance to bear for response to incidents.
(4) The Authority shall ensure that the Malawi CERT executes the
following minimum services__
(a) reactive services earl warning and precaution notice,
incidents processing, incidents analysis, incident response
facility, incidents response coordination, incident response
on the web, vulnerability treatment, vulnerability analysis,
vulnerability response and vulnerability response coordination;
(b) proactive services public notice, technological
surveillance, security audit and assessment, security
installations and mainte-nance, security tools development,
intrusion detection servicesand security information
dissemination;
(c) artefacts treatment artefacts analysis, response to
artefacts,coordination of response to artefacts, risk analysis,
continuationand resumption of activities after disaster, security
consultationand sensitization campaign, education or training
and product appraisal or certification; and
(d) do anything incidental to the functions of Malawi
CERT.
PART III__FORMATION AND VALIDITY OF ELECTRONIC TRANSACTIONS
7.
Notwithstanding the contrary intention of any written law,
where a law requires that certain information or any other matter be
in writing, typewritten or printed form, the requirement shall be
satisfied if the information or the matter is__
(a) rendered or made available in an electronic form;
(b) accessible; and
(c) capable of being retained for a subsequent reference.
Recognition
of electronic
writing