On 26 August 2024, the Cyber Security (Notification of Cyber Security Incident) Regulations entered into force. These regulations, enacted under the Cyber Security Act 2024, mandate national critical information infrastructure entities to immediately notify of any cyber security incidents. The regulations specify the process for immediate notification upon discovery, followed by detailed reporting within 6 hours and comprehensive supplementary information within 14 days.
Original source