Section 5
Appointment of Commissioner of Cybersecurity and other officers
(1)
The Minister may, with the consent of His Majesty the Sultan and
Yang Di-Pertuan, appoint a Commissioner of Cybersecurity for the purposes of this Act.
(2)
Subject to any general or special direction of the Minister, the
Commissioner is responsible for the administration of this Act and may perform such duties and functions as are imposed and exercise such powers as are conferred on the Commissioner by this Act.
Cybersecurity 12
(3)
The Minister may, with the consent of His Majesty the Sultan and
Yang Di-Pertuan, appoint a Deputy Commissioner of Cybersecurity and one or more Assistant Commissioners of Cybersecurity to assist the
Commissioner in the discharge of the Commissioner’s duties and functions.
(4)
The Minister may, with the consent of His Majesty the Sultan and
Yang Di-Pertuan, appoint as an Assistant Commissioner under subsection (3)
in respect of a critical information infrastructure —
(a)
a public officer of another Ministry; or
(b)
an employee of a statutory body under the charge of another
Minister, where that other Ministry or statutory body has supervisory or regulatory responsibility over an industry or a sector to which the owner of the critical information infrastructure belongs.
(5)
The Commissioner may, in writing, appoint such number of persons as cybersecurity officers as the Commissioner thinks necessary for carrying this Act into effect.
(6)
The Deputy Commissioner may exercise all the powers, duties and functions of the Commissioner except those exercisable under section 9
or 11.
(7)
Subject to such conditions or limitations as the Commissioner may specify, an Assistant Commissioner or a cybersecurity officer may exercise all the powers, duties and functions of the Commissioner as may be delegated to that Assistant Commissioner or cybersecurity officer in writing, except —
(a)
in the case of an Assistant Commissioner, those powers, duties or functions exercisable under this subsection or section 7, 9, 11
or 22(5); and
(b)
in the case of a cybersecurity officer, those powers, duties or functions exercisable under this subsection or section 7, 9, 11, 13, 14
or 22(5).
Cybersecurity 13