DPRK National Data Framework

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	KP Data Frwk
Region	Asia-Pacific
Country or scope	North Korea
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers KP Data Frwk

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`KP-CONST-SEC` Integrity of Correspondence-Handling Systems	The constitutional guarantee of privacy of correspondence implies that systems carrying communications be protected from tampering, which integrity hashes on components make verifiable (Socialist Constitution, privacy-of-correspondence guarantee).	Scan
`KP-SIL-INV` State Software Inventory	State direction of software production presupposes a complete inventory of the software components in use (Software Industry Law 2004).	Scan
`KP-NET-VER` Version Records for Network Management	Administering computer networks under state rules requires knowing the versions of the software operating on them (Computer Network Management Law).	Scan
`KP-NET-SUP` Accountable Software Origins	State control over network software implies that each component's producer or supplier be recorded and answerable (Software Industry Law 2004; Computer Network Management Law).	Scan
`KP-SIL-DOC` Documented Software Records	State registration and oversight of software presuppose dated, identifiable documentation of the systems deployed (Software Industry Law 2004).	Scan

All 22 from the standard set, adapted to KP Data Frwk.