CHAPTER VI Final provisions (Sections 28–33) Section 28 Enabling clause (1) The Agency and the Ministry of the Interior shall determine the important information systems and their determinative criteria according to Section 6, letter d) in a decree. (2) The Agency shall set out the following points in a decree: a) The content and structure of security documentation, the content of security measures and the extent of security measures according to Section 6, letters a) to c), and the content and extent of security rules according to Section 6, letter e) b) The type, category and assessment of the importance of cyber security incidents and the requirements and the method of cyber security incident reporting according to Section 8, paragraph 7. c) Requirements for the notification of the application of a reactive measure and its outcome according to Section 13, paragraph 4 d) A template of the contact details request notice and its form according to Section 16, paragraph 7 e) Sectoral and impact criteria for determining an essential service operator and the specification of the importance of an impact of a disruption of essential service on the security of social and economic activities according to Section 22a, paragraph 1 f) Means of the disposal of data, operation data and information, and their copies Transitional provisions Section 29 (1) Public authorities and legal or natural persons specified in Section 3, letters a) and b) shall send a notification of contact details according to Section 16 within 30 days from the effective date of this Act. (2) Public authorities and legal or natural persons specified in Section 3, letter b) shall start fulfilling their obligation specified in Section 8, paragraphs 1 and 2 within 1 year from the effective date of this Act at the latest. Section 30 Public authorities and legal or natural persons specified in Section 3, letters c) and d) shall: a) Send a notification of the contact details according to Section 16 at the latest within 30 days from the day on which their information or communications system was identified as a critical information infrastructure