Section 24
Corrective measures
(1) If the Agency finds a deficiency, it shall order the inspected public authority or legal or natural
person to remedy it. It may also set out the method of the remedy.
(2) If the information or communication system of a critical information infrastructure, the
information system of an essential service or an important information system is imminently
jeopardised by a cyber security incident that may cause damage or destroy it due to the found
deficiencies, the Agency may prohibit the inspected public authority or legal or natural person to
use the system or its part until the found deficiency is remedied.
Inspecting the activity of the Agency
Section 24a
(1) The activity of the Agency shall be inspected by the Chamber of Deputies, which shall establish a
special supervisory body for this purpose (hereinafter “the supervisory body”).
(2) The supervisory body consists of 7 members. The Chamber of Deputies shall determine the
number of members so that each deputies' club constituted according to the membership of a
political party or a political movement for which the deputies were elected shall be represented;
the number of members is always odd. Only the deputies of the Chamber of Deputies can become
members of the supervisory body.
(3) Unless otherwise provided for in this Act, another legal regulation15) shall be appropriately
applicable to the actions of the supervisory body and to the rights and obligations of its members.
(4) The members of the supervisory body may enter the premises of the Agency accompanied by the
director of the Agency or an authorized employee.
(5) The director of the Agency submits to the supervisory body the following documents:
a) A report on the activity of the Agency
b) The Agency’s budget proposal
c) Supporting documents needed to inspect the implementation of the Agency’s budget
d) Internal regulations of the Agency
e) On request a report on cyber security events and cyber security incidents from critical
information infrastructure, important information systems and information systems of
essential service.
Section 24b
(1) If the supervisory body assumes the Agency unlawfully limits or violates citizens’ rights and
freedoms, or that the Agency’s decision-making within administrative proceedings is hindered by
errors, it is entitled to require a necessary explanation from the director of the Agency.
(2) The supervisory body is obliged to inform the director of the Agency and the prime minister of
any breach of the law it learns about through its activity, which was caused by an employee of the