El Salvador Cybersecurity and Information Security Law 2024
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
| Short name | SV Cyber |
| Region | Americas |
| Country or scope | El Salvador |
| Sector | Government |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers SV Cyber
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
SV-CYBER-INV Software Asset Inventory | Information-security governance requires entities to maintain an inventory of their technology assets, including the software components they run (Cybersecurity Law 2024, asset-management/governance obligations) | Scan |
SV-CYBER-SYS System Identification | Each information system in scope must be identified by name with its constituent components enumerated (Cybersecurity Law 2024, asset-management obligations) | Scan |
SV-CYBER-INT Integrity Controls | Entities must implement controls that preserve the integrity of information and of the software that processes it, verifiable through cryptographic integrity data (Cybersecurity Law 2024, information-security measures) | Scan |
SV-CYBER-VULN Vulnerability Management Readiness | Risk-management and incident-response duties require knowing the exact version of every deployed component so vulnerabilities can be matched and remediated (Cybersecurity Law 2024, risk-management/incident-response obligations) | Scan |
SV-CYBER-ID Component Identifiability for Incident Response | Incident reporting to the ACE requires components to carry standard identifiers so affected software can be pinpointed rapidly (Cybersecurity Law 2024, incident-notification duty) | Scan |
SV-CYBER-SUP Supply-Chain Verification | Security risk management extends to third-party and supplier risk, so the supplier of each software component must be recorded (Cybersecurity Law 2024, third-party/supply-chain risk provisions) | Scan |
Policy templates
All 22 from the standard set, adapted to SV Cyber.
Ecuador Organic Law on Personal Data Protection
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
El Salvador Personal Data Protection Law 2024
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.