Bangladesh Cyber Security Act 2023
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
| Short name | BD CSA |
| Region | Asia-Pacific |
| Country or scope | Bangladesh |
| Sector | Government |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers BD CSA
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
BD-CSA-CII Critical Infrastructure Asset Knowledge | Operators of declared Critical Information Infrastructure must protect those systems, which starts with an enumerated, named inventory of the software platforms they run (Cyber Security Act 2023, CII declaration and protection provisions) | Scan |
BD-CSA-INT System Integrity Verification | Unauthorised access to and alteration of computer systems and CII are offences, so operators should be able to verify component integrity via cryptographic hashes (Cyber Security Act 2023, offences against computer systems and CII) | Scan |
BD-CSA-VULN Vulnerability Assessment Readiness | Emergency response and threat mitigation coordinated by the national agency require operators to know exact software versions so vulnerabilities can be matched and patched (Cyber Security Act 2023, National CERT and emergency-response powers) | Scan |
BD-CSA-SUP Supply-Chain Verification | Safeguarding CII against compromise includes knowing the provenance of the software supply chain, so components must have named suppliers (Cyber Security Act 2023, CII protection duties) | Scan |
BD-CSA-ID Component Identifiability | Incident investigation and digital forensics under the Act require system components to carry unique identifiers (PURL or CPE) (Cyber Security Act 2023, investigation and forensic provisions) | Scan |
BD-CSA-FMT Machine-Readable Asset Records | Cooperation with the National Cyber Security Agency is practical only if software asset records are exchanged in standard machine-readable formats (Cyber Security Act 2023, agency cooperation and reporting duties) | Scan |
Policy templates
All 22 from the standard set, adapted to BD CSA.
Australia SOCI Act
Security of Critical Infrastructure Act - 11 sectors, risk management program, mandatory IR reporting.
Bhutan ICM Act 2018 (Data Protection)
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.