In section 70 of the principal Act,--
(a) for sub-section (1), the following sub-section shall be substituted, namely:--
'(1) The appropriate Government may, by notification in the Official Gazette, declare any computer resource which directly or indirectly affects the facility of Critical Information Infrastructure, to be a protected system.
Explanation.--For the purposes of this section, "Critical Information Infrastructure" means the computer resource, the incapacitation or destruction of which, shall have debilitating impact on national security, economy, public health or safety.';
(b) after sub-section (3), the following sub-section shall be inserted, namely:--
"(4) The Central Government shall prescribe the information security practices and procedures for such protected system.".