The Office of the Registrar of Companies (ORC) has challenged a cybersecurity sanction imposed by the Cyber Security Authority (CSA), arguing that the penalty was premature and procedurally unfair. The ORC says the sanction relates to its procurement of a Network Operations Centre (NOC) and Security Operations Centre (SOC), a process it insists was substantially completed before the CSA directed Critical Information Infrastructure (CII) institutions to engage Tier One licensed cybersecurity service providers. The dispute follows a CSA statement announcing sanctions against the ORC and Purpleline Solutions Limited for alleged cybersecurity non-compliance.