Duty LXD-7257
Provides telecom services, in Azerbaijan
Code of Administrative Offences, New Article 371-2, Cybersecurity Compliance Duties of Information Infrastructure Subjectsfrom , in 8 months5 lines
Law of the Republic of Azerbaijan on Amendments to the Code of Administrative Offences of , new art. 371-2.1.1, 371-2.1.3 to 371-2.1.5 · Read the law's page
- This binds, from , the subjects of information infrastructure, including owners of internet information resources, internet providers and hosting providers (reached by declaring that you provide telecom services or operate an essential service), and computer incident response centers and security operations centers; it does not reach critical information infrastructure, state bodies including the Central Bank, intelligence and counterintelligence subjects, or entities supervised in the financial markets (note to article 371-2).
- Carry out the authorized body's instructions on securing your information infrastructure (preventing cyber threats, cyber attacks and cyber incidents and remedying their results) and on digital investigation, including supplying the result of the investigation (article 371-2.1.1).
- Answer the authorized body's inquiries on the state of your information infrastructure's cybersecurity within 24 hours, and its digital investigation inquiries within 5 working days (article 371-2.1.3).
- Carry out continuous real-time monitoring of cyber incidents and cyber attacks and the initial technical response to them (article 371-2.1.4).
- Meet the general and special cybersecurity requirements for information infrastructure that performs socially significant functions (article 371-2.1.5).
Code of Administrative Offences, New Article 371-2, Immediate Reporting of Cyber Threats, Attacks and Incidentsfrom , in 8 months2 lines
Law of the Republic of Azerbaijan on Amendments to the Code of Administrative Offences of , new art. 371-2.1.2 · Read the law's page
- This binds, from , the subjects of information infrastructure, including owners of internet information resources, internet providers and hosting providers (reached by declaring that you provide telecom services or operate an essential service), and computer incident response centers and security operations centers; it does not reach critical information infrastructure, state bodies including the Central Bank, intelligence and counterintelligence subjects, or entities supervised in the financial markets (note to article 371-2).
- Submit immediately to the authorized body the information on cyber threats, cyber attacks and cyber incidents directed at your information infrastructure, together with the information obtained from your real-time monitoring and initial technical response (article 371-2.1.2).