PENALTIES proposed for infringements of incoming cybersecurity legislation should be reviewed by lawmakers before the two bills are submitted to the Cabinet for consideration this month, legal and industry experts say.