| (1) |
An air carrier shall— |
| (a) |
identify and secure its critical information and communications technology systems and data to ensure cybersecurity, privacy and resilience as prescribed in Document SA-CATS 114; |
| (b) |
ensure that its cyber security measures are in accordance with a risk assessment and threat levels; |
| (c) |
implement cyber security measures as prescribed in Document SA-CATS 114; and |
| (d) |
report cybersecurity incidents as prescribed in Document SA-CATS 114 to the Director within 48 hours of becoming aware of an incident. |
[Regulation 114.17.1(1) substituted by section 19(a) of the Thirty-Third Amendment of the Civil Aviation Regulations, 2026, Notice No. 7844, GG55226, dated 21 August 2026 and shall come into operation upon Publication in the Government Gazette, save for Part 92, which shall come into operation upon the Proclamation by the President of the Civil Aviation Amendment Act, 2021 (Act No. 22 of 2021]
| (2) |
An air carrier shall ensure that its cyber security measures are commensurate with a threat level. |
| (3) |
An air carrier shall implement cyber security measures as prescribed in Document SA-CATS 114. |
Foodstuffs, Cosmetics and Disinfectants Act, 1972
