Recently, the government declared 29 government institutions as important information infrastructure under the Digital Security Act of 2018 to ensure the protection of information. According to the information and communication technology division in the gazette of this list, illegal access to important information infrastructure can be punished with imprisonment of seven years or a maximum fine of Tk. 25 lakh or both. Unlawful entry causing damage or attempting to cause damage shall be punishable with imprisonment for 14 years or a maximum fine of Tk. 1 crore or both.
After that, biased comments and reviews started to appear from political parties and institutions. In such an opinion, the idea that no information can be obtained from the important information infrastructures announced by the Information and Communication Technology Department is ‘fabricated and contrived’ and the ICT Division said that it is ‘spreading confusion in the public mind’ with such statements.
In a circular issued by the ICTD on Sunday, the public is ‘requested not to be misled by misinformation from various quarters’ in this regard. It has been said, ‘This step has been taken in the interest of the state and the people and if the security of the said infrastructure is disturbed in the slightest, it will cause huge loss to the people. This has nothing to do with the violation of the public’s right to information or is not inconsistent with the right to information’.
The press release also provided an explanation highlighting how the ideas are fabricated and misleading. It is said that – Critical Information Infrastructure is any such external or virtual information infrastructure declared by the government, which controls, processes, transmits or stores any data or any electronic information and which, if damaged or endangered – (a) may adversely affect public safety or economic security or public health, (b) national security or state integrity or sovereignty. As per the provisions of section 15 of the Digital Security Act 2018, the government has declared 29 institutions as critical information infrastructures, taking into account the above matters by notification in the official gazette.
As important and financial information of the government and people are stored in these institutions, it is essential to ensure their cyber security. The main purpose of this declaration is to provide safe and uninterrupted services to the public by ensuring the security of the infrastructure by completing the IT audit of the important information infrastructures, building proper infrastructure, maintaining the right quality network, using hardware and software according to proper standards, employing skilled and qualified human resources, and other purposes. Note that many countries of the world such as: India, Korea, United Kingdom have also identified some critical information infrastructures.