Are listed-sector organizations automatically critical infrastructure?
No. INSA must designate specific infrastructure and notify its owner. Sector membership is a reason to investigate, not the final decision.
FOUR SHORT ANSWERS
Official proclamation PDF The answer first. Detail when you need it.
These are navigation answers, with the relevant article or official source attached.
Read the supporting explanation
Is Proclamation 1426/2026 already in force?
Not yet. It was published on 21 July 2026 and is expected to take effect on 21 July 2027. Other Ethiopian laws already apply.
Who has the 48-hour notification duty?
A designated critical-infrastructure owner. Article 7 places the duty on the owner. The official reporting system and later rules control the operational details.
Does the proclamation license cybersecurity providers?
Yes, in principle. Articles 16–20 create the framework, but a directive must identify which products and services are covered.
START BY ROLE
Take the shortest path for your job.
LEADERS & LEGAL
See what may apply now
A current-law map, the future proclamation and the questions that still need counsel or regulator confirmation.
Open the legal map IT, SECURITY & RISKTurn duties into proof
Map controls to evidence: records that show a policy, decision or security activity really happened.
See the technical lens INCIDENT TEAMSReach the official route
Prepare the essential facts and submit directly to Ethio-CERT or INSA.
Open incident guidance BUYERS & PROJECT OWNERSCompare a scoped engagement
Typical duration, participants, inputs and sample deliverables are stated before you contact us.
Compare packagesCORE TERMS
Four phrases used across this site
- Designation
- The formal step where INSA names specific infrastructure as critical and notifies its owner.
- Governance
- Who makes security decisions, who owns the work and how progress is checked.
- Evidence
- Records showing that a policy, decision, control or security activity actually happened.
- Negarit Gazette
- Ethiopia's official journal for publishing laws. Its publication date can affect when a law starts.
GCI commitment score
ARTICLE 718Published owner duties
ARTICLE 7(14)48 hoursFuture notice period for covered owners
ARTICLE 22ETB 2MTop stated range for specified violations
Free public guidance ends here
Use the guides, sources and navigator to understand the published framework. No account or organization data is needed.
Organization-specific work starts with a written scope
If you need interviews, document review, gap analysis or a tailored roadmap, compare the consulting packages.
See packagesMove from a general answer to an owned plan.
See the package structure first, or send only your sector and the decision you are preparing for. Do not send sensitive incident or system data.