On 28 August 2020, Executive Regulation for Law No. 175 of 2018 on Anti-Cyber and Information Technology Crimes (Prime Minister's Decree No. 1699 of 2020) entered into force. The Executive Regulation outlines cybersecurity measures to safeguard data and digital infrastructures against threats. It mandates the use of encryption standards, such as Advanced Encryption Standard (AES) with a minimum key length of 128 bits for general systems and 256 bits for critical infrastructure. Additionally, it requires the implementation of secure protocols such as HTTPS, regular system updates, and annual penetration testing to identify and mitigate vulnerabilities. Service providers must also deploy firewalls and maintain up-to-date antivirus software to protect against malicious attacks.
Original source