Duty LXD-1952
Reuses other publishers' content, in Côte d'Ivoire
Mandatory Reporting of Attacks, Intrusions and Disruptionssince 2 lines
Décret n°2021-917 du 22 décembre 2021, Arts. 16-17 · Read the law's page
- Inform ARTCI, the body Article 16 names, immediately of any attack, intrusion or other disruption likely to impede your information system's proper functioning; ANSSI, which now houses the national incident-response centre CI-CERT, publishes the online declaration form for every kind of entity.
- Where you are designated and notified as a critical-infrastructure operator or manager, expect your cybersecurity focal point to also serve as your liaison to CI-CERT and to a sector cybersecurity officer, roles this vocabulary does not separately express.
- This duty runs to every public or private organization operating an information system in Côte d'Ivoire, with no activity or size gate.
- Expect ARTCI, not your own organization, to take the measures it judges necessary to stop a disruption once you have notified it.
RGSSI and PPIC Compliance Dutyin force2 lines
Décret n°2021-916 du 22 décembre 2021, Arts. 1-2 · Read the law's page
- Comply with the RGSSI (the ISO 27001/27002-based security standard Décret n°2021-917's audits check you against), which Article 2 makes binding on every public body and private enterprise, and, if you also operate a designated critical-infrastructure asset, with the PPIC.
- Where you are designated and notified as a critical-infrastructure operator or manager, renew a complete risk analysis of your critical infrastructure at least every six months and designate a cybersecurity focal point, a designation this vocabulary does not separately express.
- Do not expect this décret to state its own penalty for noncompliance: enforcement runs through Décret n°2021-917's audit, certification and sanction mechanism, filed as its own row in this jurisdiction.
Mandatory Information Systems Security Audit and Certificationin force4 lines
Décret n°2021-917 du 22 décembre 2021, Arts. 3-4, 19-21 · Read the law's page
- Undergo a security audit for certification of your information system every three years, performed by ANSSI or by an audit provider (PASSI) that ANSSI has approved.
- Undergo a further mandatory periodic security audit eighteen months after your certificate is issued.
- Correct a major nonconformity the auditing authority identifies and have your information system re-audited within twelve months, or receive a formal notice ordering you to comply.
- Expect a financial penalty proportional to the breach's severity and the advantage you gained, capped at 300,000,000 CFA francs and doubled on a repeat breach, if you fail to complete the mandatory audit.
- If you are a public body, or a private organization with an information system located on Côte d'Ivoire's territory, you fall inside Article 3's mandatory-audit population; Article 3 names in particular a telecommunications or ICT company, a telecommunications or internet service provider, a company whose information system connects through Côte d'Ivoire's public telecommunications networks, a company that automatically processes its customers' personal data in providing its service, an electronic-transactions company, an ARTCI-approved service provider, and an electronic-archiving or record-keeping provider, and that list is not exhaustive.
Copyright and Neighboring Rights Act, quotation, press-review and current-events exceptionsin force5 lines
Loi n° 2016-555 du 26 juillet 2016, Arts. 25-26 (Quotation, Press Review and Current-Events Exceptions), relative au droit d'auteur et aux droits voisins · Read the law's page
- You need not seek permission to use bare facts and data, the news of the day as such, ideas, methods, procedures, concepts or information as such, or official legislative, administrative or judicial texts and their official translations; they are excluded from copyright protection outright.
- Once a work has been disclosed, you may make analyses, press reviews and short quotations justified by a critical, polemical, educational, scientific or informational purpose, and use a work to illustrate teaching, if the use is not abusive, carries no lucrative purpose, and credits the author's name and the source.
- You may reproduce and make accessible to the public, in short extracts and for an informational purpose, a literary work seen or heard during a current event, by photography, audiovisual means or broadcast, on the occasion of reporting that event, crediting the author and source.
- Do not rely on that current-events permission where reproduction or broadcasting rights were expressly reserved.
- Do not assume these articles reach a systematic aggregator's reproduction of headlines and snippets: no reported Ivorian decision has tested it beyond a traditional press review or a broadcaster's current-events report.