Duty LXD-2273
Records text chat, in the Democratic Republic of the Congo
Digital Code, Livre IV: General Cyberattack Cooperation and Incident-Reporting Dutysince 3 lines
Code du numérique, Livre IV, Titre II, Chapitre I, et Titre III, Chapitre I, Section 1, Ordonnance-loi n° 23/010 du 13 mars 2023 (art. 276 et 281) · Read the law's page
- Cooperate in detecting cyberattacks in accordance with the applicable legal and regulatory provisions.
- Inform the Agence Nationale de Cybersécurité of every attack, intrusion or other penetration liable to impair the operation of another information system or network, so as to let the Agency take the measures necessary to address it, including isolating the affected system.
- Comply with the measures the Agence Nationale de Cybersécurité prescribes to put an end to the disruption.
- This binds the operator of an information system, public or private, and more broadly any natural or legal person operating in, or possessing expertise in, the digital sector, without any sector limitation.
- No fixed numerical notification deadline is stated; the duty runs from the operator's own awareness of the attack, intrusion or penetration.
Digital Code, Livre IV: Digital Services Provider Security Obligationssince 4 lines
Code du numérique, Livre IV, Titre III, Chapitre I, Section 2, Ordonnance-loi n° 23/010 du 13 mars 2023 (art. 295 à 297) · Read the law's page
- This binds a digital services provider (fournisseur des services numériques) generally, regardless of the sector in which it operates.
- Implement systems qualified to detect events likely to affect the security of your own information systems; the qualification of the detection systems and of the service providers operating them is delivered by the Ministry responsible for digital affairs, the Agence Nationale de Cybersécurité having been consulted.
- Submit your information system to controls the Agence Nationale de Cybersécurité conducts to verify its security level and its compliance with security rules, at your own cost.
- Expect the Agence Nationale de Cybersécurité to be able to obtain your users' or system holders' identity, postal address and electronic address when their systems are vulnerable, threatened or attacked, so as to alert them.