The Authority may issue directives to owners of critical information infrastructure, cybersecurity service providers and service providers to ensure national cybersecurity, and each must comply; failure pays 250 to 10,000 penalty units per directive. The CII Directive of 2021 is issued under this section, and the Authority applies it to each breached directive separately (two fines of 10,000 penalty units, GHS 240,000, in August 2026).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.