Sierra Leone Cyber Security and Crime Act 2021
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.
| Short name | SL Cyber Act |
| Region | Middle East & Africa |
| Country or scope | Sierra Leone |
| Sector | Government |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers SL Cyber Act
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
SL-CSC-CSIRT Incident Response Readiness | The National Cybersecurity Coordination Centre coordinates incident response nationally, and cooperating with it requires an enumerable, named inventory of deployed software assets (Cybersecurity and Crime Act 2021, Part II, ss. 2-3) | Scan |
SL-CSC-CNII Critical Infrastructure Integrity | Designated Critical National Information Infrastructure must be protected against compromise, evidenced by verifiable integrity hashes across the software components operating it (Cybersecurity and Crime Act 2021, Part III) | Scan |
SL-CSC-CNII-ID Identifiable Infrastructure Components | Designating and protecting critical infrastructure presupposes that its software components are identifiable via standard identifiers (Cybersecurity and Crime Act 2021, Part III CNII provisions) | Scan |
SL-CSC-VULN Vulnerability Management Readiness | Preventing the unauthorized access and system-interference offenses the Act criminalizes requires deployed components to carry concrete, known versions for vulnerability assessment and patching (Cybersecurity and Crime Act 2021, offense and CSIRT provisions) | Scan |
SL-CSC-EVID Evidence-Grade Documentation | The Act's electronic-evidence procedures presuppose documented, uniquely identified and timestamped records of the software environment under investigation (Cybersecurity and Crime Act 2021, electronic-evidence provisions) | Scan |
SL-CSC-SUP Supply-Chain Accountability for CNII | Protective measures for critical-infrastructure operators encompass knowing and vetting the sources of deployed software, requiring named suppliers for its components (Cybersecurity and Crime Act 2021, Part III protection directives) | Scan |
Policy templates
All 22 from the standard set, adapted to SL Cyber Act.
Seychelles Data Protection Act 2003
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
Somalia Data Protection Act 2023
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.