In accordance with the provisions of Article 8 of Decree No. 2-15-712 of 12 Joumada II 1437 (22 March 2016), which sets the protection mechanism for sensitive information systems of critical infrastructure, the concerned organizations are required to design and implement protection strategies to prevent certain events or at least limit their direct impact on the organization's objectives and ensure business continuity despite the loss of critical resources.

Note: Following the entry into force of the provisions of Law No. 05-20 on cybersecurity and its implementing decree, a new version of this guide is under development and will be published shortly.