Cyber Incident
An event jeopardizing digital system integrity.
How the laws define this
Both legal instruments establish that a cyber incident centers on an event that impacts information or the systems associated with it. Under both rules, an event must affect either technological structures or the information tied to them to qualify. The primary point of divergence rests in how each text characterizes the precise nature of that impact. Under [ސައިބަރ ސެކިއުރިޓީގެ ޤާނޫނު], the definition broadly captures any event that compromises the confidentiality, integrity, or availability of information or information systems. By contrast, [“Kiberxavfsizlik to‘g‘risida”gi O‘zbekiston Respublikasi Qonuni] applies a distinct standard, requiring that the event leads to either the disruption of the functioning of cybersecurity objects or an illegal impact on stored information. Consequently, [ސައިބަރ ސެކިއުރިޓީގެ ޤާނޫނު] frames incidents around compromising confidentiality, integrity, or availability, whereas [“Kiberxavfsizlik to‘g‘risida”gi O‘zbekiston Respublikasi Qonuni] focuses specifically on functional disruption to cybersecurity objects or illegal impacts on stored data.
Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.
How jurisdictions differ
What is distinctive in each definition, binding law in force first.
| Jurisdiction | Instrument | Status | What is distinctive |
|---|---|---|---|
| Maldives | Cyber Security Act | In Force | Adds explicit coverage of confidentiality and availability alongside integrity, broadening beyond just jeopardizing integrity to any compromise of these core CIA triad elements. |
| Uzbekistan | Law of the Republic of Uzbekistan "On Cybersecurity" | In Force | Limits to events disrupting cybersecurity objects or involving illegal impacts on their stored information, narrowing focus to specific targets and unlawful actions. |
What it triggers
- Under the Maldives Cyber Security Act, it triggers enforcement by the National Cyber Security Agency and incident response management.source
- Under the Law of the Republic of Uzbekistan 'On Cybersecurity', it leads to application of cybersecurity standards and protection of critical infrastructure.source
Definitions (2)
Any event that compromises the confidentiality, integrity, or availability of information or information systems.
An event that leads to the disruption of the functioning of cybersecurity objects or the illegal impact on information stored therein.
Questions and answers
What does a cyber incident cover under Maldives law?
It covers any event compromising confidentiality, integrity, or availability of information or systems. The Cyber Security Act uses this to enforce standards via the National Cyber Security Agency.
How is cyber incident defined in Uzbekistan's cybersecurity law?
It is an event disrupting cybersecurity objects or illegally impacting their information. This supports the law's framework for standards and oversight.
What triggers cyber incident response in these laws?
In Maldives, the National Cyber Security Agency manages responses. Uzbekistan applies standards and infrastructure protection.