Documents

Reference framework of qualification requirements applicable to Cloud service providers

In accordance with Article 4 of Decree No. 2-24-921 of 18 Rabii II 1446 (22 October 2024) concerning…
  •  

National Cybersecurity Strategy

Thanks to the evolution of information and communication technologies, digital technology is now…
  •  

Reference Framework for the Qualification of Information System Security Audit Service Providers

In accordance with the provisions of Decree No. 2-21-406 for the application of Law No. 05-20 on…
  •  

National directive on information system security (NDISS)

"The development of digital technology has been on the agenda of public action in Morocco for…
  •  

Application Security Verification Framework

Software development security is a generic term that encompasses a set of strategies that work…
  •  

Guides

Guide on Data Classification

As part of the implementation of Law No. 05-20 on cybersecurity and its implementing decree No.…
  •  

Cybersecurity Incident Management Framework

In an ultra-connected world where process digitization and the number of digital transactions are…
  •  

Frequently asked questions about law 43-20 on trust services for electronic transactions

The objective of this document, which gathers most of the frequently asked questions about Law…
  •  

Assessment of software development lifecycle security maturity

"Cybersecurity increasingly constitutes a real challenge for public and private organizations as…
  •  

Approval Guide for Sensitive Information Systems of Critical Infrastructures

Law No. 05-20 on cybersecurity stipulates in its Article 19 that any sensitive information system…
  •  

Guide for the Security of Industrial Information Systems

Today, industrial systems widely use information technologies, although they were not designed to…
  •  

Guide for Developing a Business Continuity and Disaster Recovery Plan

In accordance with the provisions of Article 8 of Decree No. 2-15-712 of 12 Joumada II 1437 (22…
  •  

Recommendations and Best Practices for Configuring BGP and DNS Protocols

The BGP protocol allows the exchange of routing and network accessibility information (called…
  •  

Guide for Information System Security Audit

Information Security Audits and Their Importance Cyberattacks are increasingly targeting the…
  •  

Guide for Information System Security Risk Management

Organizations increasingly need to identify their organizational needs regarding information…
  •  

Technical Guide on Network Security

The increase in the use of information technologies, the development of the Internet, and…
  •  

Guide Governing Security Related to Outsourcing Information Systems

Outsourcing in the field of information systems has become a common practice that offers several…
  •  

Web Application Security Guide

With the development of the Internet in Morocco, public administrations increasingly seek to…
  •  

To report any criminal digital content, including threats to the security of individuals and groups, praise or incitement of terrorism, and violations of the rights and freedoms of children, please use the following platform : www.e-blagh.ma

DGSSI2025 All rights reserved