Final Provisions

70. Implementation of the requirements of the Description does not release cybersecurity entities from the obligation to implement the requirements laid down in other legal acts that seek to ensure the security of network and information systems, except in the cases provided for in Article 1(3) of the Cybersecurity Law.

71. Cybersecurity entities must implement the cybersecurity requirements no later than within 12 months from the date of their registration in the Cybersecurity Information System, except in the cases provided for in paragraph 72 of the Description.

72. Cybersecurity entities must implement the technical cybersecurity requirements laid down in paragraphs 26, 31, 47, 57, 60, 64 and 69 of the Description no later than within 24 months from the date of their registration in the Cybersecurity Information System.