(1) The Minister may prescribe any component or any class of components as a critical component or critical components.

(2) Without prejudice to the generality of subsection (1), in prescribing a component or class of components, the Minister may have regard to:

(a) the impact a compromise of a component referred to in subsection (1) would have on the availability, authenticity, integrity or confidentiality of those networks and services;

(b) the likelihood of a compromise of such a component;

(c) the extent of the impact a compromise of such a component would have on national security, or economic or societal activities;

(d) the number of users likely affected by a compromise of such a component.