Section 24 Corrective measures (1) If the Agency finds a deficiency, it shall order the inspected public authority or legal or natural person to remedy it. It may also set out the method of the remedy. (2) If the information or communication system of a critical information infrastructure, the information system of an essential service or an important information system is imminently jeopardised by a cyber security incident that may cause damage or destroy it due to the found deficiencies, the Agency may prohibit the inspected public authority or legal or natural person to use the system or its part until the found deficiency is remedied. Inspecting the activity of the Agency Section 24a (1) The activity of the Agency shall be inspected by the Chamber of Deputies, which shall establish a special supervisory body for this purpose (hereinafter “the supervisory body”). (2) The supervisory body consists of 7 members. The Chamber of Deputies shall determine the number of members so that each deputies' club constituted according to the membership of a political party or a political movement for which the deputies were elected shall be represented; the number of members is always odd. Only the deputies of the Chamber of Deputies can become members of the supervisory body. (3) Unless otherwise provided for in this Act, another legal regulation15) shall be appropriately applicable to the actions of the supervisory body and to the rights and obligations of its members. (4) The members of the supervisory body may enter the premises of the Agency accompanied by the director of the Agency or an authorized employee. (5) The director of the Agency submits to the supervisory body the following documents: a) A report on the activity of the Agency b) The Agency’s budget proposal c) Supporting documents needed to inspect the implementation of the Agency’s budget d) Internal regulations of the Agency e) On request a report on cyber security events and cyber security incidents from critical information infrastructure, important information systems and information systems of essential service. Section 24b (1) If the supervisory body assumes the Agency unlawfully limits or violates citizens’ rights and freedoms, or that the Agency’s decision-making within administrative proceedings is hindered by errors, it is entitled to require a necessary explanation from the director of the Agency. (2) The supervisory body is obliged to inform the director of the Agency and the prime minister of any breach of the law it learns about through its activity, which was caused by an employee of the

Select target paragraph3