• Units report to heads, oversee risk management and incident response

• Move follows surge in cyberattacks targeting Algeria in 2024

Algeria has strengthened its institutional framework to protect public information systems as cyber threats increase.

Presidential Decree No. 26-07 of Jan. 7, 2026, published in the Official Gazette on Jan. 21, sets out the organization and operation of cybersecurity units within public institutions and administrations. The measures are intended to improve the prevention and management of cyberattack risks.

Each public entity will be required to establish a dedicated cybersecurity unit, separate from the department responsible for the technical management of IT systems. The unit will report directly to the head of the institution and will coordinate all actions related to data protection and system security, including across agencies under its oversight.

The unit will be tasked with developing cybersecurity policy and overseeing its implementation. It will conduct risk mapping exercises, design appropriate remediation plans, and ensure continuous monitoring and regular audits. Any incident must be reported immediately to the relevant authorities.

Compliance with data protection laws

The decree also requires compliance with personal data protection legislation, in coordination with the national authority in charge of the sector. It encourages cooperation with public procurement and internal security bodies to ensure security clauses are included in outsourcing contracts and to strengthen the protection of staff and equipment.

The initiative comes as cyberattacks intensify in Algeria. In 2024, the country faced more than 70 million attempted attacks, according to Kaspersky data, ranking it 17th globally among the most targeted nations. More than 13 million phishing attempts were blocked, while nearly 750,000 malicious email attachments were detected and stopped.

Authorities say the framework is expected to strengthen cybersecurity governance across the public sector and support Algeria’s digital transition by protecting public services, critical infrastructure, and sensitive data. It also aims to boost confidence among citizens and businesses in the country’s digital ecosystem.

Samira Njoya