i'h.41)*,? 1.KL-ice /4.91)ho-kfte GT111A.

4..g&-agt A-Lal
FEDERAL NEGARIT GAZETTE
OF THE FEDERAL DEMOCRATIC REPUBLIC OF ETHIOPIA
1,e 1 la04- +"PC 6.glrfve 14.9"h4-eLpe 20th Year No 78
Mai Mill ‘114,9°•- "4 ADDIS ABABA 22'd October, 2014
rhc ?coal

aWD•64. CONTENTS
R1.11 cft`PC rIKI-46.W 5.91' Regulation No. 320/2014

aomi ?og'ic mi**cal„V h‘Pk Information Network Security Agency Re-establishment

"9116.59 9.Y sruhc g.341 75V %A.%Yli't Proclamation Execution Council of Ministers Regulation....
Page 7688

ravoi-ef. u) m-1-R341 tiac Prpfki COUNCIL OF MINISTERS REGULATION No 320/2014

Pr,.3cc°Y7il u.441 Kim+ tbrm. N1R1c COUNCIL OF MINISTERS REGIII ,ATION TO PROVIDE
°9**"7., hpk1 Atinkago ?coal ?°zxn÷c4- ythc FOR EXECUTION OF INFORMATION NETWORK
SECURITY AGENCY RE-ESTABLISHMENT
ILA- K141
PROCLAMATION
9nliC n,4- Ph.1-Hcf 11/4.KG-AT This Regulation is issued by the Council of
/4.9"1<1e-AfT 4T•11A.h Ministers pursuant to Article 5 and Article 35 of the
•ifIC Ation)113 nclYT1CD- NTY: (WPC VP16/grin Definition of Powers and Duties of the Executive
(11hTk +11c XY.I:LCA.6 Nl+sv 6 NC Organs of the Federal Democratic Republic of Ethiopia
hl+R. (1-16 .1hr vh.1G:call7i3 on/41 K) '1* Proclamation No. 691/2010 (as amended by
h.Y1(1.1 NI475 Acni**9" MPk: -WPC Proclamation No. 803/2013) and Article 11(1) of
04/ffity, h14'SV "1.6(6) aDe"44' ,eu's Information Network Security Agency Re-
Establishment Proclamation No. 808/2013.

1-wA PART ONE

m4,411 GENERAL
6. ierc Ceti 1. Short Title

X 1) .041 "Mu:cal:AI aD441 This Regulation may be cited as the "Information

N1g7S tni**°9,V h(Pk:- cniALRffity Network Security Agency Re-establishment
rIic ri,4• 4'FC Proclamation Execution Council of Ministers
•in° A.A1441
Regulation No.320/2014".

g. ÷Clmi 2. Definitions
h7(141 AA 4-c7-51" Ifftma)- NMI"' In this Regulation unless the context otherwise
1111.1-4,C requires:
6/ "h(Pe (17114• tro441 KUTiq• 1/ "Proclamation" means the Information Network
9** (111..e WY: +11C Security Agency Re-establishment
XY.X/eiti.:‘ yar1 Proclamation No. 808/2013;

g/ NITA: to.pw e AC Aft/DA•:•- ,4A4- 2/ definitions provided for under Article 2 of the
C'•An• •.6.9011. Proclamation shall be applicable;

Jr,* IP,
Unit Price 16.95
4 4'
?ILA r..r.r. itrili
Negarit G. P.O.Box 80001
Neg
r
 nd
.71Lal 41TC dX 19,r+ "AI +1 era_ Federal Negarit Gazette No. 78 22 October, 2014 .... Page 7689

r/ "tura" m I Ai- 0E0441 gUltii- 3/ "Agency" means the Information Network

ialit Security Agency;

.01 P'117'1" 07 Ai- flg' 4-1W 4/ "membership registration" means a

hk:SI ilaphg.A h•Afg registration for membership at different
•1-V94- ,9C (19-99i- nankar security institutions and associations through
Aft Alt h7A1A-1• A°?1"1 agreement to obtain various services via
website subscription;
9111711
"6/ "c'e1,eIC fietelIC on4)115 5/ "cyber operation" means a technique that is
used to exploit cyber intelligence and digital
071,•1? gUlti-1.15 ?MIT gull' 4-1 Ca /R• forensic evidence, curb cyber activities that
threaten national security and citizen's safety
Pe1.e.11C 114.tifril.5D7.1 Atin"0.4.
or defend the state sovereignty from an attack
11A-M'1/4- 11,e, l'etemcs by cyber and electromagnetic technologies;
-1h5ntl-qt 1`..01.4-1 AtiohilhA
1114. 11Y. P°9.o)•A tlgo
W/ "TS ii.e..61141:" 'IA'! PC"' 6/ "Director General" means the Director
:: General of the Agency.

iiCA 0-A+ PART TWO

hAibrnito• ana5134-i M. ?IS 19°1°7 AGENCY'S DATA, AUDIT AND EVALUATION

E. AVVITZ•T 471,404 3. Confidential Data

Notwithstanding the provisions stipulated under
1' •t. 5077 11,TC9" tn other laws, the Director General:
fitalkal ?Am• A Te4.,eAi ?twill/- 1/ shall restrict the disclosure of employees
Pi/141 AV:* anetLYPT I profile, certain financial accounts, tools,
aat-rf P11-1-10-1A. AV.71-1 working procedures, outputs, strategic and
hg."/ 'PA+ wili`PC •1/1., Ilanf1t'9" planning documents to any body by
timilYea•" MIA NlAY,WO Si gC 9 designating them as top secrets;

u/ Alich.G-TS •1-.*°111' A•P*(7D- 2/ when he believes it is vital for national

onamgc h+51" ?►S Awer-1- security, security of the Agency, its core
MVO. an(f"r1 (139111 competencies and its employees' wellbeing,
milYco•r ?PLY,- VITS h.-MT may categorize, through directive the
?NO- anGAPTS tlet°4 rAhJ. Agency's working places, tangible and
0'0404 'NI+ )ic 11.1111C 41A- intangible assets information and other
flani149" tr915 an antn geographic indicators information as top secret
or confidential and determine to whom and
nonanGs'
when it shall be accessible.
O. ()Ax MS' ?ten tai,÷ 4. Financial and Performance Audit
6/ Wu t C•hgliTICD• (Ise, 'Pc 1 / Notwithstanding the provisions stipulated under
AY,6)1.1-4- ??Lrgi.co• 1414i- me Article 3 of this Regulation, the Director
co,er NCA- 1107.Aywom- NA.,PC an• flan-A- General may issue a directive, upon approval
hlAteaDGe/DC aV39° h1A,e,anGanC by the Prime Minister, that entails total or
Am9Y:41 c"1.,(11TA apanef partial restriction of the Auditor General or his
Arn+ ► , 09104-4. h+CP $'0K A:: m+1►,e, representative to audit the Agency's assets.
11?1,11,a Pone w• The Prime Minister shall order the amendment
of the directive periodically by assessing the
apanGf•l N1.01 11A
secrecy of the data.

:0/ AR.•I-C PS 4X4 h•v‹. 2/ The internal auditor of the Agency shall inspect,
Irlfaria)- ananG5' anAL-1- ffl.141 in accordance with the directive issues by the
P•PanAh•P 11411.71-1 A1/,P:1-1 hc ti,A4 Director General, the assets, documents and
'nt 1.96+ .9ita► *'rC p+r÷ 11 + VI.% g.9° Federal Negarit Gazette No. 78 22nd October, 2014 .... Page 7690

M1111. aDZAPY-1 ,eanzr&-Ai other necessary data stipulated under Article 3

?hltreL m.Pt- of this Regulation; conduct financial and
performance auditing.
tz/ mu) h14117 10•A h14 1V (g) anwzi• n•trr 3/ The audit report prepared by the internal auditor
N14.••C ?"1.KG70)- 49"Coolo in accordance with sub-article (2) of this
4m1A'C•11 Att'SA:: Article shall be submitted only to the Director
General.
rxtr35-1- tat+ 5. Security Auditing
h.g3e1.0)- b9DVD•I-C1 ane1Gi- 1/ The Agency shall design and notify in a
fKL7- tA§: °DAG• A°914- KU11/-1- reasonable time to the organization subject to
11"9Z,VP eVIA 1141.51KC7a c'K audit about the standards, criteria's, working
NA. 4- "r+r (llt°7(1)* procedures, security auditor's rule of
(1-1)4CP:4- aD antlY PT
engagement and audit report presentation
i ?S'arri-1- N/4.•-C71- ?"9170{,11.1- system, while it conducts security
flig.Rar ananG.? hS ?tag..)- GTC.1- vulnerability audit to ensure the security of
information and computer-based critical
t1+1,-Z•11 t$1.10-'1. infrastructures.
-P*074- hh+.t'clo N1/4.f0}44-
U/ fiNki- •-*°14. MR. 2/ The Director General shall periodically
anCU °•C 1•A1°•h S'ffat-1 071•T determine the schedule of security audit of
114•1,-.kAfte m4'°'kJ' 0)-ta organizations subject to audit by considering
nat/A7(14- (WS 14,e,6114-4. 11?21-1.0)- their national significance and strategic
,e(DASA:: importance.
1"/ 2%4.4- ••K1,•2. 4-*°7-1- nKtM1• MVP 3/ Without prejudice to their right to seek
LTC• olf, ‘1•14-6.? raDmr+ clarification on the report of security audit, the
(Pr 11)bYIA.(9- organizations subject to audit are duty bound
rho an.POAS 71C9°if to accept the recommendations and to take the
awn•AK-•: necessary measure.
Nit:t. 111.-iVrar f'Kt)' :h 4/ The Agency shall provide the necessary
t• i• 7►14.•PKC'h t1 "7.t41 N14.4-11. technical and other supports to the
htlg./17.01-1 • ?-khViC Adr4- organization subject to audit to capacitate
4-1 fig•41 them to carry out security audit by themselves.

t1fth.1CCmra3 -khqlt•X. KWh+ 6. Information Technology Security

ti,g111.0)• WilfstE
4•RA tvITO).. tbd% 1/ Prior to the implementation of vital national
fli:KC°141 aDAZ•• Am9•-71- 4h.167.C9. critical information infrastructures,
711 mikkaolPh (1Cic.1-5 --051.it (1.71A information management systems and geo-
ofiLg .9C 4-ffIrri- ATM- TCYh-14 spatial information associated projects and
haloPilTd•5 ATM- related procurements being made, the Agency
"PirP4 hang-gm/TM- n6.1-:- shall ensure:

U) PIT'gh.1• '1`11111 (1).e9° riPir a) the intended project or the procurement

ti-t•h anantAl a9f7X4•43 process fulfills the security criteria;
?Cn9Z,97111
ATCYYVh /VI+ 19(1.01141" rC4.4.C. b) the satisfaction of the security criteria that
MA lir 44 Cli,er Itsfic1+* 4Ktr3-1- the goods, services or systems produced
anainKs°4-1 halA-P03• an an 4,4- 4' a)- IS as input for the project or the availability
cor.4" nhlAitr-1- AcL15°I of standard risk management process
?Rim+ .R.43fm-1 ?inn+ within the manufacturers or service
providers;
hane•C anT4-1 4°9L 71T:
di) 9"C• = taAltr•h a),er c) that the product, service or system meet
hang111- W.+ M1,117. an C7E/IMP 71. the necessary criterion prior to make use
VIL,Yrit of it;
lit 4,,RZA "Mal *PC ex 149'9. +1 i.t: `3.9° Federal Negarit Gazette No. 78 22nd October, 2014 .... Page 7691
an) ?4-`7114-5 1114,167i1 V.+ 11.V.0110. d) that the implementation and configuration
anfig.C•h aphSai•1 l'a7Z7VP I process is carried out in accordance with
the security criterion;

w) fir:04 +1114• KlY351-5 e) the continuity of post implementation

c11.91• hanG4: avT4-1 r'? .91T: security procedure and risk management
NA(14.:: process;

g/ 111-1.1) h'34'W 10•A h14'5V (6) 4.1•annh-h4-1 2/ For the application of sub-article (1) of this
K1,71P:f AmMG"/ Paltantth,q-Ta)-
Article, the concerned institutions shall
cooperate and notify to the Agency their
4•*°74• fiTeghi• N+ATablc
project implementation plan and related
e7'ir5D71•1 ht1.p.g:(700)- Aiur3A.co-
procurements.
rn9ela45" l'ap•1-(111C "IYS-

litigtrh+ '71.6- 14°1°7 7. Security Assessment and Evaluation

6/ ibraa 1111.0 h1.1'SV 4 (6) 1/ The Agency shall 'carry out the functions
t'tonlarP4-1 V7i1G•4• i'al,thcaVia)- specified under Article 5 (1) of this Regulation
074.6e KtrY/-15 41(11.1,-ce Ph."6".Cmi,71'3 in accordance with national security and
KtY31/4% ClIACK*1
national information security standards, in a
manner that encourages science, innovation
Argil I Mail,- NK-tr41i nhtrthql.
opportunities, technological advancement,
tmfravr)-1 novsnz-
mutual benefit and by using organized
vq-xe-A: 11114•-MP9:11 flaom+9" I aboratori es.
gaSA::

h.gleup• MIX Y.141 kil+SV 4 (fi) P•antlh
'fr1.1 •-714•4• iltniKar3 M.S71:1116)-
aDAL•1- -1;hYlr.A. I MG- `11.4-5
MLA% ein-PHtls 17D170-Tirol m9G,971`
2/ The Agency shall ensure the availability of
sufficient infrastructure, technology, work
process and necessary professionals that
enables it to carry out the functions stipulated
under Article 5 (1) of this Regulation.

hoc flA°%tnarc mR 01C h.+SP71- 715- 8. Export and Import of Products and Security
-ktiTtrk93 4- KIM+ Technologies
6/ h.ram• Ph.16".C°17115 li9°rEtt•C1 1/ The Agency shall, in order to ensure the
ane1Z4- fi4L7 4A4.: anwLt Am74• security of information and computer based
tia9,9rr MA w.e. inC a)•(11' infrastructure, issue standards and criterion
ani(14•5 '11'9" 4,e, ancrA regarding information security technologies
h07C i'mi.mar i-11.16-.C°11:111 Ktrr). that can be imported for domestic use and that
-1;115701.P9=1-1 alanAh1- 11.1)4C.v:5* can be exported and, cause implementation of
anapHY trif:srptihra)- ht1114• same in coordination with concerned bodies.
ac Ilan.K14-4° gtlIStn/A::
e/ ,SY,6)1•1-.4• •1(11.1•T KUllii.") A.14
2/ The Director General, with notification to the
(1),e9" (1,114 concerned body, may restrict the inspection of
rhly,)• ?Jos:cal:61 •I;hti°44: the Agency's product or other related
a),e,9" N_OPT AV:1- documents to be exported or imported, when
9119T AJ1W3 gi:1-11A -(111° A.$'9"1 he believes that the inspection and other
limi.optih•h• hilt% (1°V1a4 hlliC related process may endanger national
Pa9otn•5 inC i'khk:1A.a)- security by exposing the confidentiality of the
NfrP":1'5 AV.71' information technology or other related
products or documents.
if/ 1111.0 Wi+W 10•A M'I'W (0) C•Pg'177a)• 3/ Without prejudice to sub-article (2) of this
hly.,raln+ trs- no7c •trr Article, the Director General may issue a
c.ran4•h a),e,r vr► tzcmaiy; directive that prohibits the exportation of
ely,fic 4tr3/4. -1;hctrAPT litiG•-•/G•6.)-e; certain domestically produced or customized
ll/nIrce information and cyber security technologies,
cryptographic or electromagnetic technologies
Vt %ARM 4 A 5964• "mai 411,C d'g XI +1 gii1 g.9° Federal Negarit Gazette No. 78 22nd October, 2014 .... Page 7692

gt/Trl. 4.Y.A h3RC (DK cD•6Eb based on their significance for national
N3,03,ecom• ?‘"LhAVIA avonLY A.Aspal security.
AT4A::
d. MAW ?T i1 9. Cyber Operation
fi/ 11/1,A-4- ?-t-Amm- 1/ Without prejudice to the powers and duties
(lAall5 •.71C Nli?.•1•m114' V'T itglAAD- assigned to other relevant organs in other laws,
071,•T ??1,e llC 11114,e5ii- the Agency shall lead and coordinate national
ffl•6m15•Ai $3111-(1111,-A:: cyber operation.
u/ (Amu: NT67i1:- 2/ Cyber operation may be carried out at any
time:
0) vioenc anGric P14.X..0-A 67.41(1.11 a) to collect cyber information and digital
cnin4Y11 forensic evidence;
A) Ilki7C /11e, ?"1...orn• Pelg,11C5 b) to prevent cyber and electromagnetic
m9111.4:11 -1;htrA°X. (1`.47-1'71-1 attack targeted the national sovereignty; or
AaohimA cDser
ih) -141-1.1,te cuoe,9" ?MITI c) when it is appropriate to prevent cyber
f'w1.1/4- ceLenc NI+nfrA,P3T1 action that threaten the national security or
Arip°0-i• tinkly/ coin- citizen's security.
IlmicTo)-9° 7.11, A.ti'LK• oe.:141A::
3/ Upon the prior notification of the time and other
NT67i1:- relevant information to the requesting body, the
Agency shall carry out cyber operation:
U) 111..KG-A r1(1 i• 4.61111 (0,er tlhAA a) with the instruction of federal government
(7077ni- TY+ or by the request of regional governments;

A) nm+ily, k0'11. Ual (Doer b) by the order of the court upon request by
•t.*9- ?mg, Y 116, (11 the Attorney General or the head of the
SAG'• n§:ct 11°I.AT concerned prosecution institution; or
(Doer
c) by its own motion.

A.ttibt ,e,T4A lf5r9" Amftw-

MA NT676- 1)711, '/M1 hS
tooT anap3:1, fetc0-.411::

taln.co. netenc NT6711 1/Ai• Pa9:0- 4/ The Agency shall ensure the confidentiality of
.70015°T hmft• MA afr‘Eb* 11AA MA information obtained in the cyber operation
1191011,-Vri. N1A.Y11- process otherwise than in the hand of the
Y,KL,9A:: requesting body.

ki.01(1.01, PinG•hl Pe1R,11C NT6711 5/ The Agency shall design a system to execute
tic 1)"9..en6.Wrili- and enforce national cyber operation functions.
nci.)- ,e+cIA::
(1/1/4.X..0-A 11.L1A.h 10. Digital Forensic
fat/ £111 ti'3.1,5V 0 I '.1-.077a tilgtmfl+ Without prejudice to the provisions of Article 9
trti" of this Regulation, the Agency shall:

6/ flticinl: ki141V 'A (X) 11,1-Vir/o}, anuf44• hS 1/ carry out digital forensic investigation in
fltiCK• 11(17A`P i•6H11 hanC°114 cooperation with relevant investigating bodies
h}1114• ,r9C Ilan•it1C tv4.)1.-A 6:41A.V1 pursuant to Article 6 (8) of the Proclamation
9"Canl• PILL/4A and by the order of a Court;
lit irlAYM /...AZ-A 5.94+ ;Mal 4TC ex ¶4,9"4. MA Federal Negarit Gazette No. 78 22ndOctober, 2014 .... Page 7693

g/ MN/ I1G-A1CD- 11-14.n.A C.Z1A.A 2/ provide the necessary assistance to justice

Co h+90 ►1/11.4,1N- ?IS N1RLYIA•11•h
rne• organs to setup and build up their own
MI.+17.0)•1 Pi:C.9A" capability regarding digital forensic
investigation.
. Man a 11. Intelligence

6/ kalA.0)- Ohtani. h 14'5V (X0) (1),er ntl.0 1/ The Agency may provide information, among
(E) an AZ.). the information obtained pursuant to Article 6
antlhA &DIM PC1704- 1704 (14) of the Proclamation or Article 9 (3) of
this Regulation, to investigative bodies if it
?°/.1/) an tiAcp• AanC°76 hht14- A.AT
finds that the information is appropriate to
cp,e9" flq:CK' AA- na9Azn'i4. initiate investigation or present evidences or
"'Ma tiAS 11.4- 4.61171 information upon court order or request of
w',r IT? TPA anGga)•1 public prosecutor; provided, however, that the
a),e9" i9AZAM•1 A.AT ,044A U'crr Agency shall not be compelled to reveal the
PanZA 9°16"q'S aDLYIP(q. sources and the means by which such
11goP/1- N1,14.7AW h Y.7 Kg'9 ":: information or evidence has been obtained.
e/ BPS Ag,1,114-<- PrinLYI hAfIA41 2/ The Director General shall issue a directive
tic 6 L- 4. N3,14. U•9° vapos, regarding intelligence collection, storage and
PhAG•C AC(14• PPM Ptro-f transmission as well as the rule of engagement
tly 9"71C an go S'a)(11A:: and code of ethics to intelligence officers.
Xe "Cm—PC K•11-1-V hx,9 r 47` op fiat 12. Computer Emergency Responding Center
miehA
t6Y.1A.0)- tAq= trilth.G-ce Cirta)•hC The Agency shall issue a directive to determine the
.V.s174-q' hg,9 9"1171 on1164. mihhA aC relation of the critical institutions with the National
AA"?.5°G-Ta/• 'TWO. i AP- AV Tfr-Y-71- Computer Emergency Responding Center, the
GTO- AAmi.KL7-114- tIg.S N1A.0-9° method and systems of reporting various attacks
-MAC iltioaDLY YADTICA:: and the coordination's thereof.

ii'. AA AJ-1ACK• 13. Standard

ralka) h.16°.coTa35 1/ The Agency shall have the power to issue
tAq: anAL• - WI' RIF3/7- standards that ensure the security of
.VIG..979' ?rn9a)•(71 information and computer based critical
i-S h1.11?t094'al•1 Paph --t-A infrastructure and to monitor their
YADG(Pg1:: implementation.
e/ niLu h14'• 10-A . (6) Iltffl.'/Tico- 2/ The security standards issued in accordance
anAL-1- ?"90)m- ?RUT/4. A --1/4C.P.:1- with sub-article (1) of this Article shall include
MVO aDifci=a)• aer WWI) if CD-1 a provision that clearly states whether or not a
f"1A? ?°V.,PeLe °iti'P 4. certain standard is a compulsory.
,Evrcfil4PA::
hA rA-1- PART THREE
AATeinp1- hA-1-Axci litaw.rP071- NS Ag °Pir PROJECT ADMINISTRATION, PAYMENT AND
SPECIAL PROCUREMENT
70. AATegh+ hA÷AKC
14. Project Administration
6/ h.r3A.M. PG- A- PTCY.hi- ha).4'4'C 1/ The Agency shall have its own charts of
Ac14. y4z41A:: account for projects.
h.Y111.0)• niric W-111' 2/ The Agency may not domestically compete in
bids for the provision of products, services or
9°C i• OV.9" WiAff/A-4- hPPC•119" CV.,"
to take projects.
C0/- hgADAKI"::
Ti'
.r/ anAGY iale1.0)• 3/ Government institutions shall cover whole
project costs that the Agency undertakes to
Pc93hcco•III •M•1 Telh-ris (1)-6LbP7 -
perform and, when necessary they may pay
11(7D-A- ap?ig." NIKhALA7.1/.9"
%?14F10: 'cm+ 4vrc r+r-is yo + nit Federal Negarit Gazette No. 78 22nd October, 2014 .... Page 7694

an-n-m-1 co6Lb (14..t‘GTLS' the entire project cost in advance.

0/ (IAA S'.141 cog,9" aoamGP ??14w 4/ Notwithstanding the provisions stipulated in
fl.TCY" CDAY° flAM ht,t,r) flhAlrC other regulation, directive or customary
P°I.4L17 fl.TCY" practices, public enterprises may effect
(1t01A.ce- payment of the project cost wholly or partially
P°I.A4Ital TCYh-fq- anbPDT in advance.
WSW" 11114,A 11.1'X'°V.S' A.h4=A-
rttu to4,R* 10-11 (r) K-1.911 5/ For the application of sub-article (3) of this
11°11K'Ll f7111.11S A°91- Article, the Ministry of Finance and Economic
‘77:1.114;C flanWhA il4411411, Development may issue a guarantee letter on
behalf of the Agency.

al kb0.1A.a)• P+Kwri V4•5' 6/ The Agency may not be required to provide a

(13(14-SP971-1 h,e,mr+r:: guarantee for contract performance or advance
payment.
tut-tanaiatI tic" 15. Commensurate Fee
The Agency shall:
p1 r.'H1 h14,a X;k: (Y) 1/ supply to the public, without any fee, products
h7A1A-1'41 hS PC-r-1-1 Yti9°39 3 and services specified under Article 18 (2) of
?h7A1A-4. AU414-H111• 11'01 PPC(141. this Regulation;

A'1A fly )• aDA6g A°71.(110-Tai 2/ require government institutions to cover the

TCYWY-1 S A°7.0alTa rc-V-fc h7A`7lto entire cost of the project or products and
14 on-A- aP5Lba3 h4•,(' services for which it provides;
ftihCAA

r/ tian7711-1- hc tAq• 3/ require critical private infrastructures or public

anw4•1- Act/14 MiLftiSal-STco- Te3 gh-Y. enterprises to pay the entire cost of the project
A°9..?4'Cfl• rc-r-Ts h7A1tt—f-T or products and services, for which it provides,
an•ti.•l coat ?rn9.ri4l15 hag (l 1)711g with minimum profit margin as compare to the
tORC 11+ PA ?:1.0= normal market price;
4°1.0144 h4-4) fl1hVIA:

AlbtrT 913C -11.4.S 4/ determine payment for the service and

h7A1A-14 h.(11 11•hanAh• Poplin-1-1 products that it provides for foreign
?A.Ttr°7A. h+a16b-LS A,A4 ill°9241 institutions by taking into account government
AcottSA:: diplomatic directions and other objectives.

IL Af 16. S ecial Procurement

fi/ tb 3r1.0D hil.167CGVA35 AMC RUT/4- 1/ The Agency may procure services and products,
,9c +1N-1'TWO' PITTD-lc ltd U3y 1• when it believes that it may be a source of
rl‘r gffitfcr't- •1tr fezolifiTco-1 security threat and directly related to information
rc-rfs MAIA-14- 9-013K h+1,41. and cyber security, from single supplier or
114,11, cp,e,r ai A 241,-11.P911 (lmicDAKC through restricted tendering.
"Pir &IOW" A•I1A::
1111.0 hl+W 1041 h1411" (fi) 4•-Vi710)- 2/ Notwithstanding sub-article (1) of this Article,
11.'C9° the Agency shall:
0) cianZX i-1,1•CPTC LTC-T4 hvipor a) directly procure from single supplier
P'Amc MAItt°14 WOK- intelligence analysis and reports as well as
h+lr(1. security training services;
b) make direct payment for membership of
A) M.")catrals VI,e,11C information and cyber security institutions.
hq•s' 114,11 . gdOVatiA::
/It ,9tLa1 41TC X T+9°-1. Iff +1 ffrli 5.9° Federal Negarit Gazette No. 78 22nd October, 2014 .... Page 7695
r (Pc Al2,6h-1-.‹. nN.0 h141,R* 10•ti ill+SV (4) 3/ The Director General shall issue a directive that
hS (k) ?taDAh-h+ lICPT enables protection of the public interest and
11+911 11°7.5'11aHl+S •1•mf410-1 flm9SG.9791 ensures accountability with respect to direct
anI7K' aDA.Str frISATA tioaDGf g0)(1141:: procurements provided for under sub-article (1)
and (2) of this Article.
}MA 2'11,-+
Ag At .K-1.97,PT FART FOUR
MISCELLANEOUS PROVISIONS,
t111+7k1S +4141C 1 7. Integration and Cooperation
Ib1XIA.(1)• :
The Agency shall:
6/ hh7C co-till A?. A? ?gUltii-i 1/ cooperate with various internal security organs,
hAtifiGS i6A-4 ?1,9C t*mii. .9C law enforcement and other relevant institutions
?°95KC7m- 4-4141C h.Y.1A.m• ?t**941i.1 in a manner that assists accomplishment of the
1119 natisivi hc '11+9131 11°9.?Ah-11C objectives of its establishment and promote
aDAh ,e1PSAi mutual benefits;
hh.Y Pa:/•6Lb h7C 2/ interact with relevant foreign government
coffl,P "70111,-i. .9C institutions, security institutions and associations
4071..01.0• ?h7G•h1 41,11,10T in a manner that ensures the protection of the
19,r 11"7.5q1m41+5* A•MT ?"/"Yl•tii. national interest of the country and respect to the
anCtri'l aDAZi• (1.Z7 aDAh- principles of sovereign relation.

X. titeihMIG-T 18. Social Obligation and Responsibility

The Agency:

6/11Am- AG•7ir ifl 11•.6/PC 1/shall discharge its social responsibilities through
?aDAA °9A°9i•S (71(1. t1lf-P9TS participation in man-made or natural disaster
°70111,-(e flaDA.Vq: h4-170- recoveries, rebuilding works and other social
affairs to the extent its capacity permits;
111.+KAi. aDml
gl A AR Ten/G-VTI flaD+ZW ?tri• 2/shall design various programs that create public
f'&167C°11711Seffl.
'inc .UM- VA.S awareness in relation to information and cyber
.9)3411,-A: 9G ri,eztic aoAA 91)C-P1IS security; provide antivirus and other similar
h7A1A-1).:1-1 AU-11G•PAII- NIR.KCA products and services;

r/ t'ci9.m+a94=a)- haolat 3/ shall take appropriate measures, to the extent

Ohlififl.5 fluie—Hr* possible, to prevent harm occurring to its
AR, NlAgr.CA- h+4° n6.4. anal" employees and the environment in relation to
ht16./17. NC9"IPT1 ,ealARAL radiation emitting x-ray technologies it make use
of;
11C71C hl.RRaa• flaDaDGY WTI 4/ may build residence or camps in all its stations
i'•Amm•1 :5116,10. AaDwali• hS in order to fulfill its responsibility led down by
AIPG-4-714f. .U11/4• A.QA i'a19.fAI.A7- law and for the security of its employees; the
aDTGYPTI cower 119"7:1.1 ni)•A•9" details to be determined by directive.
NTIA1 filflyPDT ,CPIA::
IP. A A w A.* 19. Obligations of Employees
/ nti.0 £141 hh147W 0 NAh X 11•1-aDAh•k 1 / Employees engaged in the activities specified
4-714-4. ?m9.e•1-4• under Articles 4 to 10 of this Regulation shall be
ACPM h6.XR9" s Pt•S) Auli-9"1(10 subject to disciplinary measures if they
aDaDGYPT1 •NIA6.011• Xlgtri contravene rules of engagement and code of
11A.A.TA.1 ethics.

flt1.0 h141• 10•1 h14W (fi) 2/ The disciplinary measures taken pursuant to sub-
farn'T.AC 41(1i.0 article (1) of this Article may not relieve from
•mf4:1/4•1 hYA4'C9":: civil or criminal liabilities.
 2t1,19 ETC T4.5►°•1. •'1 k6.% 9.9° Federal Negarit Gazette No. 78 22nd October, 2014 .... Page 7196

g`. ran-tqUIC 1 f..."- 20. Duty to Cooperate

(i93fia)•9" W7(1•1 ,etia hhA ,etYY) All concerned bodies shall have the obligation to
f1ating.P19" G7K* hh.Y.3l1.0)- 2C 4an•11111C (1520.4- corporate with the Agency for the implementation
of this Regulation.

gfi. 1.1,1r7.5÷ Attm ATZ- =fm- 21. Inapplicable Laws

S'.141 4°1,4'41 °WWI" 41•1 0),e,9" No regulation or directive may, as far as they are
anao4Y num g'HI AY, inconsistent with this Regulation, be applicable
with respect to matters covered in this Regulation.
•1.1.R°11.1/•• ki,e,tin

Muni, rlai-fq÷ A"1' 22. Power to Issue Directives

hk:1A.a)., Y.'3•1 Ain/N.09u ?ali.,et16.A7- The Agency may issue directives necessary for the
antroGPT1 A.ga)(11 a/1A:: implementation this Regulation.

nr. ?"7.05"11+ 23. Effective Date

,e,t) 116„4G-A "Mal This Regulation shall enter into force on the date
Wal(14• yh3 Y.rc 405 of publication in the Federal Negarit Gazette.

h4.11 Ig 4-1 g7f.z g.9° Done at Addis Ababa, this 22" day of October, 2006.

:',,,e.A°`/Cfr KAM HAILEMARIAM DESSALEGN

Pri.rhe-A.pe PRIME MINISTER OF THE FEDERAL
GT4IA.hi 9.1i.(14-C DEMOCRATIC REPUBLIC OF ETHIOPIA
•
-11C`115 mr 9-1-07.f g-Cki-