Cybersecurity Comparative Guide

1 Legal framework

1.1 Does the law in your jurisdiction distinguish between 'cybersecurity', 'data protection' and 'cybercrime' (jointly referred to as 'cyber')? If so, how are they distinguished or defined?

'Cybersecurity' is defined under the Computer Emergency Response Teams (CERT) Rules 2023 as protecting information, data systems, network, infrastructure and operational technology systems from:

• unauthorised:
• • access;
  • use;
  • exposure;
  • disruption;
  • modifications; or
  • destruction; or
• unintentional or accidental damages.

The terms 'cybercrime' and 'data protection' are not specifically mentioned in the law; however, they are dealt with under:

• the Prevention of Electronic Crimes Act 2016; and