4. Applicability, Authority and Compliance
Agencies understand and follow the requirements of GOBISM. Protection of government
information and systems is a core accountability
Protection of government information and systems is a core accountability of each governmental
agency. The role of Information Security Manual is to promote a consistent approach to information
assurance and information security across entire Government of Bangladesh.
GOBISM is intended to structure and assist the implementation of Bangladeshi laws and
government policy on information security. Compliance with the GOBISM is not required as a
matter of law. However, the controls in the GOBISM could be made binding on departments and
agencies, either by legislation, or by Government direction.
Smaller government agencies may not always have sufficient staffing or budgets to comply with all
the requirements of this manual. In such circumstances smaller agencies may choose to either
operate on systems fully hosted by another agency using their information security policies and
information security resources.
9