On 26 January 2020, Presidential Decree No. 20-05 on establishing a national framework for the security of information systems entered into force with a grace period. The private operators are required to designate a responsible person for the security of their information systems by 26 January 2021. The decree mandates the Agency for the Security of Information Systems to advise and assist both public and private operators in implementing information system security strategies and to support them in managing security incidents.
Original source