Cybersecurity and compliance guides
Practical walkthroughs: what is required, how to check your infrastructure and where the official text is.
Belarus cybersecurity regulation: an overview for international CISOs
Belarus requirements for CISOs used to ISO 27001 and NIST CSF: the regulators, Decree No. 40, OAC Orders No. 130 and No. 66, Law No. 99-Z, deadlines and a 90-day plan.
Read the guideBelarus Decree No. 40 "On Cybersecurity": what it requires from an organization
Belarus Presidential Decree No. 40: who is in the national cybersecurity system, what organizations must do, reporting deadlines and where the technical measures are.
Read the guideHow to meet OAC Order No. 130: an Annex 4 checklist
Belarus cybersecurity requirements for information infrastructure (OAC Order No. 130 as amended by No. 98, from 1 July 2026): what is required and how to check.
Read the guidePatching within a month: meeting the OAC Order No. 130 requirement in Belarus
What Belarus OAC Order No. 130 requires for software updates, the exceptions, how para. 7.8 of Order No. 66 relates, and how to build a process you can show an auditor.
Read the guideSecurity event logging in Belarus: collect and keep events for a year (OAC Order No. 130)
Keeping security events for a year under Belarus Decree No. 40 and OAC Orders No. 130 and No. 66: central collection and why logs matter for reporting deadlines.
Read the guideISO/IEC 27001 and Belarus requirements: how Annex A maps to the OAC orders
ISO/IEC 27001:2022 vs. Belarus requirements (Decree No. 40, OAC Orders No. 130 and No. 66, Law No. 99-Z): how they differ and which Annex A controls correspond.
Read the guidePersonal data protection in Belarus: technical measures under Law No. 99-Z and OAC Order No. 66
Technical measures for personal data under Belarus Law No. 99-Z, where to find them in OAC Order No. 66, the breach notification deadline and what a scan can check.
Read the guideCybersecurity and personal data in Kazakhstan: Law No. 418-V, Law No. 94-V and the Unified Requirements
Kazakhstan's cybersecurity and personal-data requirements: who they bind, notification deadlines, and what a scan of your own infrastructure can check.
Read the guideCybersecurity and personal data in Uzbekistan: Law No. ZRU-764, Law No. ZRU-547 and PP-167
Uzbekistan's cybersecurity and personal-data requirements: what binds critical infrastructure, data localization, and what a scan can check.
Read the guideSGRC or vulnerability scanner: what you need to meet the OAC requirements
How an SGRC system differs from a vulnerability scanner, which OAC Order No. 130 requirements each one checks, and why scanner findings should map to requirements.
Read the guideBelarus cybersecurity and compliance glossary: OAC, cybersecurity centers, system classes, SGRC
Cybersecurity and compliance terms in plain words: OAC, the National and other cybersecurity centers, cyber incidents, classes 3-* and 4-*, ISMS, SGRC, CVSS, KEV.
Read the guide