Commentary on provisions of Act Section 2: Duty to take measures in response to security compromises Section 105D: Duty to take specified security measures in response to security compromises
Subsection (1) provides the Secretary of State with the power to make regulations which require providers to take specified measures in response to a specified security compromise.
	Subsection (2) explains that providers can only be required to take measures that the Secretary of State considers are appropriate and proportionate to prevent adverse effects arising from the specified security compromise.
	Subsection (3) provides the Secretary of State with the power to make regulations which require providers to take specified measures where a security compromise has a specified adverse effect on the network or service.
	Subsection (4) explains that providers can only be required to take measures that the Secretary of State considers are appropriate and proportionate ways to remedy or mitigate the specified adverse effect.