Compliance FrameworksAsia-Pacific
Papua New Guinea Cybercrime Code Act 2016
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
| Short name | PG Cyber |
| Region | Asia-Pacific |
| Country or scope | Papua New Guinea |
| Sector | Government |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers PG Cyber
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
PG-CCA-ACC Unauthorised-Access Detection Readiness | Illegal access to computer systems is an offence, and detecting or investigating it requires system components to be uniquely identifiable (Cybercrime Code Act 2016, illegal-access offences, Part on offences against computer data and systems) | Scan |
PG-CCA-INT Data Interference Detection | Unauthorised damaging, deletion or alteration of computer data is criminalised, so operators should be able to detect tampering via integrity hashes on software components (Cybercrime Code Act 2016, data-interference offences) | Scan |
PG-CCA-SYS System Inventory | Protecting systems from serious hindering (system interference) presupposes an inventory of the software components that make up those systems (Cybercrime Code Act 2016, system-interference offences) | Scan |
PG-CCA-VER Version Knowledge for Incident Response | Responding to and prosecuting cyber offences requires knowing exactly which software versions were running when an incident occurred (Cybercrime Code Act 2016, investigation provisions) | Scan |
PG-CCA-PRES Forensic Record Preservation | Expedited preservation of stored computer data during investigations requires system records to be identifiable, timestamped documents (Cybercrime Code Act 2016, data-preservation and procedural powers) | Scan |
Policy templates
All 22 from the standard set, adapted to PG Cyber.