Iran Computer Crimes Law 2009
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
| Short name | IR CCL |
| Region | Middle East & Africa |
| Country or scope | Iran |
| Sector | Government |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers IR CCL
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
IR-CCL-1 Systems Protected by Security Measures | Unauthorized access is only an offence against data and systems protected by security measures, so operators must know precisely which software assets (PURL/CPE) constitute their protected systems (Computer Crimes Law 2009, Art. 1) | Scan |
IR-CCL-8 Detection of Data Alteration and Deletion | Unauthorized deletion, destruction or alteration of another's data is criminalized; detecting and evidencing such tampering requires integrity hashes over the system's software components (Computer Crimes Law 2009, Art. 8) | Scan |
IR-CCL-SYS System Interference Resilience | The law criminalizes interference with and disruption of computer and telecommunication systems; maintaining and restoring such systems requires known versions for the software components in use (Computer Crimes Law 2009, system-interference offences) | Scan |
IR-CCL-INV Enumerated Protected Systems | Custodianship duties over protected systems presuppose that each system is named and its constituent software components enumerated (Computer Crimes Law 2009, protected-system provisions) | Scan |
IR-CCL-SP Service Provider Record Duties | Service providers are subject to retention and cooperation duties regarding the systems they operate, which requires dated, identifiable documentation of system composition (Computer Crimes Law 2009, service-provider obligations) | Scan |
Policy templates
All 22 from the standard set, adapted to IR CCL.
Guinea Law L/2016/037 on Data Protection
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Iraq National Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.