Compliance FrameworksEurope
Georgia Law on Information Security
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
| Short name | GE InfoSec |
| Region | Europe |
| Country or scope | Georgia |
| Sector | Government |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers GE InfoSec
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
GE-IS-INV Critical Information System Inventory | Critical information system subjects must manage the security of their information assets, which presupposes an inventory of the software components composing those systems (GE Information Security Law asset-management obligations) | Scan |
GE-IS-INT Integrity Protection | Minimum information security requirements include protecting the integrity of systems and data against unauthorized modification; verifiable integrity hashes on components evidence this control (GE Information Security Law minimum security requirements) | Scan |
GE-IS-VULN Vulnerability and Update Management | Subjects must manage vulnerabilities in their critical systems and respond to incidents, which requires knowing the exact version of every deployed component (GE Information Security Law security-management and incident duties) | Scan |
GE-IS-SUP Third-Party and Supplier Control | Information security management extends to services and technology obtained from third parties, requiring visibility into the suppliers behind deployed software components (GE Information Security Law third-party provisions) | Scan |
GE-IS-DOC Documented ISMS Evidence | Subjects must adopt internal information security rules and undergo security audits, supported by formally identified, timestamped records of system composition (GE Information Security Law ISMS and audit provisions) | Scan |
Policy templates
All 22 from the standard set, adapted to GE InfoSec.