Oversight role and policy

The Cybersecurity Division of the Electronic Communications Office of Iceland (ECOI) monitors network and information security at telecommunications companies, operators of critical digital infrastructure and certain providers of digital services.

The role of the division is to monitor compliance with laws and regulations on cybersecurity. Its work is based, among other things, on the Act on the Security of Network and Information Systems of Critical Infrastructure No. 78/2019 and the Act on the Electronic Communications Office of Iceland No. 75/2021. Monitoring is carried out through self-assessments, audits, testing and vulnerability analysis. The aim is to reduce risk, strengthen security and prevent serious cybersecurity incidents.

Policy of the Electronic Communications Office of Iceland on the arrangement and implementation of monitoring

The policy of the Electronic Communications Office of Iceland on the arrangement and implementation of monitoring describes how the institution monitors network and information security at telecommunications companies, operators of critical digital infrastructure and providers of digital services.

The policy sets out how monitoring is organised, which methods are used and which principles apply to its implementation. The policy is based on the Act on the Security of Network and Information Systems of Critical Infrastructure No. 78/2019 and the Electronic Communications Act. Its aim is to promote security, equality, transparency and consistency in monitoring.