Section 6, 2 The Cyber Security qnd Crine Act 2021

(l) There is established a ftmd which shall be known asthe National Cyber Security Fund. (2) There shall be paid and credited into the Fund established under subsection ( I ) and domiciled in the Cenhal Bank of Sierra kone - (a) grants-in-aid and assistance from donor, bilateral andmultilateral agencies; O) all other sums accruing to the Fund by way of gifts, endowments, bequests or other voluntary contributions by persons and organisations: Provided that the terms and conditions attached to such gifts, endowments, bequests or contributions will not jeopardize tbe ftrnctions ofthe Council; and (c) allocarion from the consolidated fund; (d) all other monies or assets that may, tom time to time accrue to the Fund. (3) An amount not exceeding 30 percent ofltre Fund may be allocated for programs relating to public education and awareness raising on cyber security issues. ( ) (i) The office of the National Computer Security Incidence Response Coordination Centre shall keep proper records ofthe accounts in a form approved by the Auditor General. (if The books of account kept under sub-section (4) (i) shall witlrin 3 months after the end ofeach financial year be audited by the Auditor General or an auditor appointed by him. (iD The financial yea shall be the same as the financial year ofthe Government. No. 7 The Cyber Security dnd Cime Act 2021 l7 (, (D The CounciJ shall, a:i soon as possible but not later than 6 months after the end ofeach financial year, submit to the Minist€r a report oflhe activities, operations, underrakings, properties and financies ofthe National Computer Security Incidence Response Coordination Center for that year, including the Auditor General's Report. Gi) The Minister shall within 30 days ofthe receipt of the report referred to in sub-section (sxi) lay a copy before Padiament PART III€RITICALNATTONAL INFORMATION INFRASTRUCTTJRE ?. (l) The Minister shall in consultation with the National Cybersecurity Council recomrnend to the President who may by Order published in the Cazette, designate certain computer systems, computer dala or traffic data vital !o Sierra Leone or any combination of those matters, a:r constituting Critical National lnformation In&astructure. (2) A Presidential Ordermade rmder subsection (l), shall prescribe minimum standards, guidelines, rules or procedures reasonably required in respect of- (a) the protection or preservation of Critical National ltrformation Infiastructure; (b) the general managemed ofcritical National Information lnfi astructure; (c) the implementation of critical information systems to ensure all systems are secured by default and system and user activities are logged to facilitate accurate and efiicient information systems operations audits. D.signation Of Criri.al National lnforlnatioo lnfrastructurc (d) access to, transfer and control of data in Critical National Information Infiastructurei I8 No.7 The Cyber &curity and Crime Act 2021 (e) infrastructural or procedural rules and requirements for securing the integrity and authenticity ofdata or information contained in any designated Critical National Infomntion Infrastructur€; O the storage or archiving of data ot informatibn designated as Critical National Information Infrastructure; (g) recovery plans in the event ofdisaster. bre3ch or loss of the Critical National Information IntasEucture or any part of it; and (h) any other matter required for the adequate protection, management and control ofdata and other resources in any Critical National lnformation ln&astructure. (i) raspect for and protection ofthe fundamental Aeedoms, including the right to privacy. E. A Presidential Order made under subsection ( I ) ofsection 7 may require the National Computer Security lncidence Response Team established under section (2) to audit and inspect any Critical National Information Infrastructure at atly time to ensure compliance with the provisions ofthis Act. PARI' IV - POWERS AND PROCEDLTRES