On 28 August 2020, Executive Regulation for Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes (Prime Minister's Decree No. 1699 of 2020) entered into force. The Executive Regulation specifies that annual testing must be conducted to detect security breaches or vulnerabilities within digital systems. This includes penetration testing and vulnerability assessments to identify weaknesses that could be exploited. Providers are required to document testing procedures and results, ensuring that all identified issues are addressed promptly. The Regulation aims to maintain the integrity and security of digital infrastructures through rigorous and systematic testing practices.
Original source