Procedure for Obtaining a New License to Trade Civil Cryptographic Products and Services

Licensing Conditions

1. Human resources and expertise: Enterprises must have qualified managers and technical staff with professional capacity in cybersecurity and information safety. At least two technical staff members must hold a university degree in electronics–telecommunications, information technology, mathematics, or information security. Managers are required to hold a university degree in the same or a related field, or another degree supplemented by a recognized certificate in information security.

2. Facilities and technical systems: Businesses must be equipped with infrastructure and systems suited to the scale of cryptographic services. A technical and security plan must comply with official standards. In addition, a clear business plan is required, specifying scope of operations, customer base, technical support systems, and service guarantees.

Application Dossier

The application dossier must include:

• A written request using the prescribed form.

• A copy of the enterprise registration or investment registration certificate.

• Copies of diplomas and professional certificates of staff members.

• A detailed technical plan, including product specifications, service quality standards, and maintenance methods.

• A business plan covering scale, customers, and support systems.

• A plan to ensure information security and confidentiality during service delivery.

Administrative Process

The dossier can be submitted once through one of the following channels: in person, by post, or via the online public service portal to the Government Cipher Committee. For online submissions, documents must be digitally signed in accordance with regulations.

• Within three working days after receipt, the Committee will review the dossier for validity. If incomplete, the applicant will be asked to amend or supplement within five working days.

• If the enterprise fails to complete the dossier on time, the Committee will issue a notice of refusal within three working days.

• For valid dossiers, the Committee will appraise and issue the business license within 20 working days of receipt.