Operators of critical infrastructure in eight sectors will face fines of up to HK$5 million for failing to keep their computer systems up to date.