Cybersecurity companies subject to certification, authorisation and accreditation must obtain the Presidency's approval under the applicable rules before they begin activity. The Presidency runs certification, authorisation and accreditation for cybersecurity experts and companies and for those who supply or provide cybersecurity software, hardware, products and services (Articles 5(1)(ğ) and 6(1)(ı)). Carrying on activity without an approval, authorisation or permit required by the Law is a crime punishable by two to four years' imprisonment and 1,000 to 2,000 days' judicial fine (Article 16(2)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.