106
(aa) be lodged within 180 days from the date on which the decision was made known
by the Cabinet member or such later date as the High Court permits; and
(bb) set out the grounds for the appeal.
(iii) The appeal must be proceeded with as if it were an
appeal from a magistrate's court to the High Court.
(4)
Any information infrastructure declared to be a National Critical
Information Infrastructure must, notwithstanding any other law, comply with the
regulations made in terms of subsection (5).
(5)
The Cabinet member responsible for State security, in consultation
with the relevant Cabinet members and the Cyber Response Committee must, within six
months of the declaration of any information infrastructure, or category or class of
information infrastructures or any part thereof, as National Critical Information
Infrastructure, make regulations regulating—
(a)
the classification of information on National Critical Information Infrastructures;
(b)
security policies and procedures to be applied to National Critical Information
Infrastructures;
(c)
access to National Critical Information Infrastructures;
(d)
the storing and archiving of information on National Critical Information
Infrastructures;
(e)
cyber security incident management and continuation with service provision;
(f)
minimum physical and technical security measures that must be implemented in
order to protect National Critical Information Infrastructures;
(g)
the period within which the owner of, or person in control of a National Critical
Information Infrastructure must comply with the regulations; and
(h)
any other relevant matter which is necessary or expedient to prescribe for the
proper implementation of this section.
(6)
The owner of, or person in control of, a National Critical Information
Infrastructure, which includes National Critical Information Structures under control of a
Department of State, must in consultation with the Cabinet member responsible for