2 Section 13. 14. 15. 16. 17. 18. Change in ownership of critical information infrastructure Duty to report cybersecurity incident in respect of critical information infrastructure, etc. Cybersecurity audits and risk assessments of critical information infrastructure Cybersecurity exercises Appeal to Minister Appeals Advisory Panel PART 4 RESPONSES TO CYBERSECURITY THREATS AND INCIDENTS 19. 20. 21. 22. 23. Powers to investigate and prevent cybersecurity incidents, etc. Powers to investigate and prevent serious cybersecurity incidents, etc. Production of identification card by incident response officer Appointment of cybersecurity technical experts Emergency cybersecurity measures and requirements PART 5 CYBERSECURITY SERVICE PROVIDERS 24. 25. 26. 27. 28. 29. 30. 31. 32. 33. 34. 35. No person to provide licensable cybersecurity service without licence Licensing officer and assistant licensing officers Grant and renewal of licence Conditions of licence Form and validity of licence Duty to keep records Revocation or suspension of licence Unlicensed cybersecurity service provider not to recover fees, etc. Financial penalty Licensing officer to give opportunity to make representations before ordering financial penalty Recovery of financial penalties Appeal to Minister