3. A public body must manage effectively the security of information resources and information it holds, in particular by putting in place cybersecurity measures, including cyber defence mechanisms, to ensure the diligent taking charge of security events.
A public body must also follow good practices in information security in order to reduce risks of a breach to an acceptable level.
1296-2022O.C. 1296-2022, s. 3.