Runs an essential service, in Bangladesh

Cyber Security Act, 2026 (Act No. 81 of 2026), s. 9 · Read the law's page

• Without delay after a cyber incident occurs, inform the National Computer Emergency Response Team the National Cyber Security Agency maintains; the Act names no fixed number of hours or days for this notification.
• This binds a government, private, or autonomous organization or institution in Bangladesh, the Act's own general categories for essentially any actor rather than a licensed or sector-specific status, so an ordinary software distributor or app operator falls within it without needing a critical-infrastructure designation.

Cyber Security Act, 2026 (Act No. 81 of 2026), ss. 9(2), 15 and 16 · Read the law's page

• This binds the owner or operator of a computer system, network or information infrastructure that the Government has declared as Critical Information Infrastructure by notification in the official Gazette (reached by declaring that you operate an essential service); the Government updates the list at least once a year (section 15).
• Keep your own Computer Emergency Response Team or Computer Incident Response Team and your own Security Operation Center, and submit the Security Operation Center's report on its activities and performance indicators to the National Cyber Security Operation Center every quarter (section 9(2)).
• Audit your internal and external infrastructure every year in the manner the rules prescribe, submit the audit report to the National Cyber Security Council and inform the Director General of its contents (section 16(2)).