30
NO. 9 OF 2018
(2) The powers mentioned in subsection (1) are the following:
- (a) require, by written notice, any person to attend at such reasonable time and at such place as may be specified by the incident response officer, to answer any question or to provide a signed statement in writing concerning the cybersecurity threat or incident;
- (b) require, by written notice, any person to produce to the incident response officer any physical or electronic record, or document, or a copy of the record or document, that is in the possession of that person, or to provide the incident response officer with any information, which the incident response officer considers to be related to any matter relevant to the investigation;
- (c) without giving any fee or reward, inspect, copy or take extracts from such record or document or copy of the record or document mentioned in paragraph (b);
- (d) examine orally any person who appears to be acquainted with the facts and circumstances relating to the cybersecurity threat or incident, and reduce to writing any statement made by the person so examined.
(3) The incident response officer must specify in the notice mentioned in subsection (2)(b)—
- (a) the time and place at which any record, document or copy is to be produced or any information is to be provided; and
- (b) the manner and form in which it is to be produced or provided.
(4) A statement made by a person examined under this section must—
- (a) be reduced to writing;
- (b) be read over to the person;
- (c) if the person does not understand English, be interpreted for the person in a language that he or she understands; and
- (d) after correction (if necessary), be signed by that person.
