At its meeting held on 18 October 2024, the Council of Ministers, chaired by His Majesty the King, Supreme Chief and General Chief of Staff of the Royal Armed Forces, adopted the project decree no. 2-24-921 on the use of cloud service providers by entities and critical infrastructures with sensitive information systems or data. 

This decree provides for the establishment of a qualification regime for cloud service providers and defines the rules for selecting these service providers when they are entrusted with the management of sensitive information systems and sensitive data, within the meaning of Law n° 05-20. 

The qualification regime aims to strengthen security functions and data protection. It provides guarantees on the competence of cloud providers and their personnel, on the quality of the organizational and technical measures in place and overall, on the confidence that can be granted to them.