The national bodies
NISSA, the National Information Security and Safety Authority, is Libya's national authority for information security. Its national computer emergency response team, LibyaCERT, is where cyber incidents in Libya are reported (nissa.gov.ly/cert).
The Central Bank of Libya supervises the banking sector, so banks plan their security against its framework as well.
The international standards that prove it
- ISO/IEC 27001: a certified information security management system (see the ISO 27001 guide)
- PCI DSS: the security standard for organisations that store, process or transmit payment card data
- NIST: the US National Institute of Standards and Technology frameworks, widely used to structure security programmes
How Raqmana helps
Compliance sits in the GRC-BC-ISMS pillar of Raqmana's Next-Gen Strategy: governance, risk and compliance, business continuity and information security management.
- Assessment against NISSA's policies, and their implementation (Raqmana follows them in its own work too)
- Central Bank of Libya gap assessments for banks
- PCI DSS scoping, gap analysis and remediation support
- Automated compliance tracking
- Risk and maturity scoring
- Policies, controls and internal audit
- ISO programmes from training to certification
The Cybervergent platform automates compliance with ISO, NIST, SOC 2 and PCI DSS in one executive framework, in Arabic and English, with external auditor and advisor support and on-demand visual reports.
Where to start
A Next-Gen Strategy workshop maps your organisation to the six pillars and shows the gaps against your national and international obligations.