(2) Where the Minister designates a computer system or computer network as a critical
information infrastructure under subsection (1), the Minister shall publish the designation
in the Gazette.
(3) The Minister shall, in designating a computer system or computer network as a
critical information infrastructure under subsection (1), consider if the computer system
or computer network is necessary for –
(a) the security, defence or international relations of the country;
(b) the production, preservation or identity of a confidential source of information
related to the enforcement of criminal law;
(c) the provision of services directly related to –
(i) communication and telecommunication infrastructure;
(ii) banking and financial services;
(iii) public utilities;
(iv) public transportation; and
(v) public key infrastructure;
(d) the protection of public safety and public health, including systems related to
essential emergency services;
(e) an international business or communication affecting a citizen of Malawi or
any other international business in which a citizen of Malawi or the Government
has an interest; or
(f) the functions of the Legislature, Executive, Judiciary or security agencies.
(4) The Minister shall establish a procedure for the regulation of critical information
infrastructure.
(5) Where the Minister establishes a procedure for the regulation of critical
information infrastructure under subsection (4), the Minister shall publish the procedure
in the Gazette.
18