Part III - Cyber Incident Response Teams

6. Zambia Cyber Incident Response Team

1. The Agency shall constitute the Zambia Cyber Incident Response Team which shall—
   1. be the first point of contact with reference to the handling of cyber incidents and communication between local, regional and international cyber security incident response teams;
   2. provide incident response and management services in a coordinated manner through established industry standard policies and procedures to manage threats associated with cyber incidents;
   3. provide alerts and warnings on the latest cyber threats and vulnerabilities which may impact the public and the private sector;
   4. undertake national cyber security risk assessments;
   5. assess and coordinate the work of sectoral cyber incident response teams within the public and private sector;
   6. participate in regional and international computer emergency response team groups; and
   7. establish a cyber security incident monitoring and response system.
2. The Agency shall determine the composition, terms of reference, tenure and procedures of the Zambia Cyber Incident Response Team.

7. Constitution of sectoral cyber incident response teams

1. The Agency shall, by notice in the Gazette, require a sector to constitute a sectoral cyber incident response team.
2. The notice referred to under subsection (1), shall specify—
   1. the composition of the sectoral cyber incident response team; and
   2. the institution to coordinate the sectoral cyber incident response team.
3. The Agency shall, in requiring a sector to constitute a sectoral cyber incident response team, take into account—
   1. the needs and criticality of a sector;
   2. developments in respect of cyber security in the Republic; and
   3. any other factors that the Agency may determine.
4. A sectoral cyber incident response team shall—
   1. collect and collate cyber security incidents; and
   2. co-ordinate responses to cyber security incidents within the sectors.
5. The Agency shall oversee the operations of a sectoral cyber incident response team constituted under this section.
6. A sectoral cyber incident response team shall bear the cost of establishing and operationalising that cyber incident response team.
7. A sectoral cyber incident response team shall submit a report on the operations of that sectoral cyber incident response team to the Agency in a manner determined by the Agency.