The Assistant Commissioner has and may exercise all the powers of the Commissioner as delegated except for the powers to:
- appoint authorised officers (Section 6)
- designate Critical Information Infrastructure (CII) (Section 7)
- withdraw designation of CII (Section 9)
- take possession of computers or equipment for the purpose of carrying out further examination of analysis during serious cybersecurity incidents (Section 20)
For the power to issue written directions (Section 12), the Assistant Commissioner will be administratively empowered to issue written directions within his/her sector for operational expediency.