Section 23

Any national critical information infrastructure entity which contravenes this section commits an offence and shall, on conviction, be liable to a fine not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding ten years or to both.

Cyber security exercise