OF THE FEDERAL DEMOCRATIC REPUBLIC OF ETHIOPIA 134 Year No. 5 CONTENTS Information Network Security Agency Establishment Council of Ministers Regulations ..Page 3496 Council of Ministers Regulations No. 130/2006 COUNCIL OF MINISTERS REGULATIONS TO PROVIDE FOR THE ESTABLISHMENT OF THE INFORMATION NETWORK SECURITY AGENCY These Regulations are issued by the Council of Ministers pursuant to Article 5 of the Definition of Powers and Duties of the Executive Organs of the Federal Democratic 1. Short Title These Regulations may be cited as the " Information Network Security Agency Establishment Council of Ministers Regulations No. 130/2006 " . 2. Definition In these Regulations , unless the context otherwise requires : " critical infrastructure means any infrastructure vulnerable to information communication network Security threats having considerable impact to the social , economic or political interests of the country ; 2. " computer security " means the control of risks related to computer use to secure computing platforms ; Unit Price POBox 80001 * The African Law Archive 3. " olinformation system " means a system developed purpose collecting , processing , protecting and communicating information to users ; " information system security ” means protection information systems against intentional or unintentional unauthorized assess modification of information , whether in storage , processing or transit , and against the denial of service to authorized users or the provision of service to unauthorized users , including measures necessary to detect , document and encounter such treats ; " information terrorism " means information network to instigate terror and violence ; " information warfare " means the act of protecting information , information based decision - making process , information system and computer based network from deliberate attacks and includes the act of counter attacking such threats ; 7. " information network " means system of transporting storage dissemination information via the internet networked computer devices ; means 8. " information network security " control or mitigation of threats emanating from either governmental non - governmental information networks ; 9. " electro - magnetic energy " means radiation , other than nuclear energy generated from artificial or natural objects , used for_communicaiton , gathering of information and information warfare ; sensor 10. " remote sensing " means a method of gathering information using remote devices mounted to satellite or other space ships ; 11. " optronics " means method of gathering information using camera images within a specific range of electro - magnetic energy ; 12. " cryptology " means mathematical model used in software and hardware design and computer language to ensure information security and authentication . 3. Establishment The Information Security Agency ( hereinafter the " Agency " ) is hereby established autonomous public agency having its own legal personality . The Agency shall be accountable to the Prime Minister . * The African Law Archive * 4. Head Office The Agency shall have its head office in Addis Ababa , and may have branch offices elsewhere as may be necessary . 5 .. Objective The objective of the Agency shall be to ensure that the use of information country's and information communication network technologies telecommunication in the implementation of its peace , democratisation and development programs is without risk to the national security . Power and Duties The Agency shall have the powers and duties to : advise the Government on information and information communication network security and monitor the implementation of approved policies and legislations ; create national research and development capability information communication network technology and information warfare , and carry out research , development , design , testing and evaluation activities in collaboration with public and private institutions ; facilitate coalesced national approach in dealing with policy , legislative , knowledge and other issues relating to the use of computer network , information systems and electromagnetic energy and to information warfare ; 4. provide research based capacity building support to various security agencies and institutions on signal intelligence , technical intelligence and cryptology ; monitor collection , processing dissemination of remotely sensed data using remote sensing , magnetic field , gravity survey and electro - optical sensors and handling of geo spatial information databases to ensure their compliance with national information security standards ; ensure the enforcement of national information security standards through national cryptology research , design development technology transfer ; 7. monitor acts of crime and terror waged against the country's constitutional order and national interests using international national information communication network systems , and cooperate with the concerned authorities in taking legal actions against the offenders ; create research and development based facilities to utilize optronics , remote sensing technologies and other air and ground based survey systems surface sub - surface information collection , processing , storing dissemination ; * * * The African Law Archive * 9. provide research and development based support to critical infrastructure with respect to the selection , cryptology algorism standards , configuration , use and security of network , software and hardware technologies ; 10. undertake risk assessment studies and testing activities to evaluate reliability and vulnerability of the information communication network security systems of critical infrastructures and provide support in taking corrective measures ; 11. prevent threats to the national security , provide support to public and private institutions in the formulation and implementation of information security policy , standards and procedures in conformity with the federal information security policy ; 12. design and implement awareness creating educational training programs safeguarding information communication network security ; 13. monitor , in collaboration with other security organs , national security threats connected with the import export information information communication , sensor , information warfare cryptology technologies ; 14. ensure that the manpower required to safeguard the national information communication network security is provided with appropriate training ; 15. charge commensurate fees for the services it renders ; 16. own properties , enter into contracts , sue and be sued in its own name ; 17. perform other acts as are required for the attainment of its objective . Organization of the Agency The Agency shall have : an Advisory Board to be designated by the Government as may be necessary ; Director General and Deputy Director Generals to be appointed by the Government ; the necessary staff . Powers and Duties of the Director General 1. The Director General shall be the chief executive officer of the Agency and shall direct and administer the activities of the Agency . Without limiting the generality stated in sub article ( 1 ) of this Article , the Director General shall : exercise the Powers and duties of the Agency specified under Article 6 of these Regulations ; employ and administer the employees of the Agency in accordance with directives approved by the government following the basic principles of the federal civil service laws ; prepare the work program and budget of the Agency and implement same upon approval ; effect expenditure in accordance with the approved budget of the Agency ; represent the Agency in all its dealings with third parties ; www.Africanish SU ? 887 prepare the operational and financial * * The Africah Law Archivenarts of the washenafricanLawArchive.com 3. The Director general may delegate part of his powers and duties to the officials and other employees of the Agency to the extent necessary for the efficient performance of the activities of the Agency . Budget The Agency's budget shall be drawn from funds allocated by the Government and service fees to be collected pursuant to Article 6 ( 15 ) of these Regulations . 10. Books of accounts 1. The Agency shall keep complete and accurate books of accounts . The books of accounts and financial documents of the Agency shall be audited annually by the Auditor General or by an auditor designated by 11. Effective Date These regulations shall enter into force on the date of done at Addis Ababa , this 15ch day of Dec. 2006 . PRIME MINISTER OF THE FEDERAL DEMOCRATIC REPUBLIC OF ETHIOPIA The African Law Archive *