Ministry of Communications of Turkmenistan Updates Technical Requirements for Websites
Amul Info ·
The Ministry of Communications of Turkmenistan has introduced amendments to the technical requirements for creating and launching internet websites. The updated rules strengthen server and administrative system security, require regular software updates, encrypted backups, protection against common…
The Ministry of Communications of Turkmenistan has introduced amendments and additions to the technical requirements related to the creation and launch of internet websites. The new rules are aimed at strengthening the technical security of websites, protecting administrative systems, and ensuring the secure storage of data.
On July 23, 2026, the Ministry of Communications of Turkmenistan issued Order No. 116-ish. This document amended and supplemented the "Unified technical requirements to be observed in the creation and launch of an internet website," approved in 2021. The order was state-registered by the Ministry of Adalat (Justice) of Turkmenistan on September 1, 2026, under number 1966.
As noted in the document, the changes were adopted to improve technical requirements acting in accordance with the laws of Turkmenistan "On Legal Acts" and "On Cybersecurity."
As part of the new rules, a separate section containing definitions of key concepts used has been added. It is also required to provide a special service that allows for the automatic dissemination of updated information on websites.
Expanded Website Security Requirements
With the new amendments, the list of requirements for ensuring the security of internet websites has been expanded. In particular, timely updating of server software and used libraries, regular installation of security updates, and closing unused ports on the server are envisaged.
It is also required to restrict access to service configuration files, use network traffic filtering tools, and employ additional protection methods against common cyberattacks.
Abandoning outdated data transmission protocols, using modern types of secure data transmission protocols, configuring additional security headers, and hiding information about the version of the server software used have also become part of the new requirements.
The rules for creating and storing data backups on websites were clarified. Backups must be created in accordance with established standards, stored in encrypted form and under conditions of restricted access. The requirement to obtain secure connection certificates from reliable enterprises was also clarified.
New Rules for Protecting Administrative Sections
The new requirements outline a separate section on ensuring the security of administrative sections of websites.
Accordingly, all login attempts to the system and administrative actions must be logged. Two-factor authentication is required when entering the control panel, users are to be temporarily blocked after several failed login attempts, and secure remote connection methods must be used.
In addition, restricting access to the control panel by network address and location, as well as changing the standard address of the control panel login page, is envisaged.
Requirements for Temporary Access Keys
The amendments also detail the requirements for temporary access keys used to verify user privileges.
Rules regarding the validity period and update procedure of such keys, storage methods, and their revocation upon logout or the occurrence of a security incident were established. The maintenance of a special logbook for operations performed using temporary access keys is also provided for.
Control over the execution of the order was assigned to Ya. Gulmammedov, Deputy Minister of Communications of Turkmenistan, and the Head of the State Cybersecurity Service under the Ministry of Communications of Turkmenistan.
The full text of the amendments has been posted on the official website of the Ministry of Adalat (Justice) of Turkmenistan.