the Computer Security Inspector.
(5) Any power delegated under subsection (3) may still be exercised by the Computer
Security Inspector.
(6) The Computer Security Inspector may, from time to time, perform inspections or
evaluations of the security, stability or confidentiality of critical or important databases and
the information systems on which it is stored to evaluate compliance with the provisions of
this Chapter or any regulations.
(7) The Computer Security Inspector may without giving notice perform a security
test on a critical database or an information system on which critical or important data is
stored,or cause such test to be performed by a person that in his or her view has sufficient
skill to perform the test.
(8) A security test referred to in subsection (7) may involve the access of the system without authorisation as contemplated in Chapter 8 which access is lawful and not a
contravention of section 63.
(9) If an inspection or test under this section indicates that the data is not stored in
a sufficiently secure manner, the computer security inspector may –
(a) refer the report to any institution that has the power to regulate the person
in question for appropriate action;
(b) act in terms of subsection (10); or
(c) act in terms of paragraph(a) and (b).
(10) If the inspection or test indicates that the data is not stored in a sufficiently
secure or confidential manner or that the information system in question is not sufficiently
stable, the Computer Security Inspector may, after hearing the person in question, issue an
order –
54