Compliance FrameworksMiddle East & Africa
Syria Cybercrime Law No. 20 of 2022
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
| Short name | SY Cyber Law |
| Region | Middle East & Africa |
| Country or scope | Syria |
| Sector | Government |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers SY Cyber Law
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
SY-CYB-4 Provider Data-Retention Readiness | Internet service providers must keep copies of traffic data and hosted digital content, which presupposes documented, uniquely identified and timestamped records of the hosting and processing software (Cybercrime Law No. 20 of 2022, Art. 4) | Scan |
SY-CYB-INT Data and System Integrity | Offenses against the integrity of data and information systems oblige operators to maintain controls that detect tampering, evidenced by integrity hashes across deployed components (Cybercrime Law No. 20 of 2022, data- and system-integrity offenses) | Scan |
SY-CYB-INV Software Asset Inventory | Meeting provider cooperation and retention duties requires an enumerable, named inventory of the software components operating the service (Cybercrime Law No. 20 of 2022, service-provider obligations) | Scan |
SY-CYB-VER Known Component Versions | Preventing unauthorized access to networks and systems requires that deployed components carry concrete, known versions so vulnerabilities can be assessed and patched (Cybercrime Law No. 20 of 2022, unauthorized-access offenses) | Scan |
SY-CYB-ID Identifiable System Components | Investigating and attributing offenses against information systems presupposes that system components are identifiable via standard identifiers (Cybercrime Law No. 20 of 2022, investigation and evidence provisions) | Scan |
Policy templates
All 22 from the standard set, adapted to SY Cyber Law.