National regulatory and organisational framework defining cybersecurity governance, security standards, incident response mechanisms, supervisory authorities, and compliance obligations for public and private entities.