Act 2021
Law of Mongolia on Cyber Security
Effective: 1 May 2022
Summary
Adopted 17 December 2021. It creates a Cyber Security Council led by the Prime Minister (Art. 11), designates critical information infrastructure across seventeen categories including banks with digital payment systems (Art. 19.1), and sets incident notification duties for infrastructure operators, state bodies and IT service providers.
Topics: Cybersecurity & IT Risk
Who it applies to
All industries
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Cyber-incident notification | Deadline Immediately | — | source | |
Critical information infrastructure organisations must immediately notify the relevant centre against cyber-attacks when an attack stops their systems working normally (Art. 19.2.14). State-owned legal persons (Art. 16.1.3) and IT service providers (Art. 17.1.2) have similar immediate notification duties. Critical infrastructure operators must submit risk assessment and audit reports to the relevant centre within one month of receiving them (Art. 19.2.10). |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.