Technical

cybersecurity incident

An event of cyber origin causing or likely to cause harm.

How the laws define this

Regulated entities must recognize that these legal frameworks establish a shared baseline: a cybersecurity incident involves an event or conduct that compromises, damages, or disrupts covered computer systems, networks, data, or services, thereby triggering mandatory reporting or notification obligations alongside coordinated mitigation or response duties. Where these statutes diverge is in their threshold of impact and required operational follow-up. Under the Act on Cybersecurity (Zákon o kybernetické bezpečnosti), No. 264/2025 Sb., an incident encompasses potential harm that is merely likely to cause operational or financial impacts to critical services, while mandating cooperation with NÚKIB and CERT. In contrast, the Cyber Security Act 2024 requires an actual resulting compromise, damage, or disruption to covered assets. Meanwhile, the Cyber Security Act, 2023 (সাইবার নিরাপত্তা আইন, ২০২৩) defines incidents through specific unauthorized acts like theft, data deletion, and denial-of-service that affect confidentiality, integrity, or availability, explicitly extending duties beyond reporting to include forensic preservation.

Synthesised from the 3 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first.

Jurisdiction	Instrument	Status	What is distinctive
Czech Republic	Act on Cybersecurity	In Force	Specifies harm as operational, financial, data integrity or availability to a regulated service or wider critical services, and explicitly triggers notification, mitigation and cooperation duties with NÚKIB and CERT.
Malaysia	Cyber Security Act 2024	In Force	Focuses on compromise, damage, disruption or unauthorised access to systems, data or services covered by the Act, triggering mandatory notification, coordination and remediation obligations.
Bangladesh	Cyber Security Act, 2023	Repealed	Broadly lists specific acts like theft, unauthorised modification or deletion of data, denial-of-service and other unauthorized conduct compromising confidentiality, integrity or availability, requiring reporting, forensic preservation and coordinated response.

What it triggers

In the Czech Republic, under the Act on Cybersecurity, such incidents trigger notification, mitigation and cooperation duties with NÚKIB and CERT.source
In Malaysia, under the Cyber Security Act 2024, such incidents trigger mandatory notification, coordination and remediation obligations under the incident notification regulations.source
In Bangladesh, under the Cyber Security Act, 2023, such incidents required reporting, forensic preservation and coordinated response until it was repealed.source

Definitions (3)

An event of cyber origin that causes, or is likely to cause, operational, financial, data integrity or availability harm to a regulated service or to the wider provision of critical services; such incidents trigger notification, mitigation and cooperation duties with NÚKIB and CERT.

Act on Cybersecurity (Zákon o kybernetické bezpečnosti), No. 264/2025 Sb.Definition 1 of 3

Any security event that results in the compromise, damage, disruption or unauthorised access to systems, data or services covered by the Act, and which triggers mandatory notification, coordination and remediation obligations under the incident notification regulations.

Cyber Security Act 2024Definition 2 of 3

A cyber security incident includes acts such as theft, unauthorised modification or deletion of data, denial-of-service and other unauthorized conduct that compromises the confidentiality, integrity or availability of computer systems, networks or information. The definition is purposefully broad to cover a range of events requiring reporting, forensic preservation and coordinated response under the Act.

Cyber Security Act, 2023 (সাইবার নিরাপত্তা আইন, ২০২৩)Definition 3 of 3

Not to be confused with

Incident of cybersecurity

The related term focuses solely on compromising confidentiality, integrity, or availability, while these definitions add specifics on harm types, covered entities and triggered obligations.

Technology incident

Technology incident refers broadly to any event causing disruption or compromise of technology services, whereas these definitions are cyber-specific with regulatory duties.

Questions and answers

What duties does a cybersecurity incident trigger in the Czech Republic?

It triggers notification, mitigation and cooperation duties with NÚKIB and CERT for regulated services or critical services.

What counts as a cybersecurity incident under Malaysia's Cyber Security Act 2024?

Any security event resulting in compromise, damage, disruption or unauthorised access to covered systems, data or services.

Does Bangladesh's Cyber Security Act, 2023 still apply to cybersecurity incidents?

No, it was repealed; it previously covered broad acts compromising confidentiality, integrity or availability requiring reporting and response.