Emergency Management Regulations 2006

In this regulation —

means a system that generates, collects, shares, sends, receives, stores, carries, processes, connects, uses or acts on or in relation to electronic information; and

includes the following —

any network, service, program, code or similar thing that is used by, within or in relation to the system;

any device, technology or similar thing that is used by, within or in relation to the system;

any electronic information to which the system does anything referred to in paragraph (a);

to gain unauthorised access to the system or electronic information that is used by, within or in relation to the system;

to intercept electronic information that is used by, within or in relation to the system;

to prevent the system from properly functioning.

A cybersecurity incident is an event or situation in which —

an electronic system is modified or impaired as described in subregulation (3); or

a threat is made that causes a person to have a reasonable suspicion that an electronic system is being or will be modified or impaired as described in subregulation (3); or

a person reasonably suspects that an electronic system is being or will be modified or impaired as described in subregulation (3).

For the purposes of subregulation (2)(a) to (c), the modification or impairment must be capable of causing or resulting in —

loss of life, prejudice to the safety, or harm to the health, of persons or animals; or

destruction of, or damage to, property or any part of the environment.