Part II - The Zambia Cyber Security Agency

3. Establishment of Zambia Cyber Security Agency

1. There is established the Zambia Cyber Security Agency in the Office of the President which is responsible for the administration of this Act under the general direction of the President.
2. The Agency shall be responsible for the coordination of cyber security matters in the Republic.
3. The Agency shall collaborate with relevant institutions which are constitutionally mandated to defend the Republic in cyber warfare and offensive cyber operations to uphold the sovereignty of the Republic.

4. Functions of Agency

The functions of the Agency are to—

1. subject to the Zambia Security Intelligence Service Act, 1998, coordinate activities relating to cyber security and cyber resilience;
2. take measures in response to cyber security incidents which may threaten critical information, critical information infrastructure or any information or infrastructure in the Republic likely to be affected by a cyber security incident;
3. disseminate information on cyber threats and vulnerabilities;
4. identify and ensure the protection of critical information and critical information infrastructure;
5. establish codes of practice and standards for cyber security and monitor compliance with the codes of practice and standards by controllers;
6. issue licences for the provision of cyber security services;
7. regulate the conduct of cyber security service providers;
8. promote and undertake research and development relating to cyber security;
9. promote and undertake capacity building, education and awareness activities on matters relating to cyber security;
10. undertake information security audits on critical information and critical information infrastructure;
11. adopt standards for cyber security products and services and certify cyber security products and services;
12. develop and implement a national cyber security response plan;
13. undertake digital forensics;
14. provide technical assistance and collaborate with other relevant national and international institutions in matters relating to this Act; and
15. advise the President on matters relating to cyber security.

5. Director-General and other staff

1. The President shall, appoint a Director-General of the Agency who shall be a public officer.
2. The Director-General is the chief executive officer of the Agency and is responsible for the day to day management of the Agency.
3. The President shall appoint a Deputy Director-General, Directors and Deputy Directors who are necessary for the implementation of the provisions of this Act.
4. The Director-General shall, on the recommendation of the Staff Board, appoint other officers below the rank of Deputy Director that are necessary for the implementation of the provisions of this Act.