Section 26Sec./Art. 26

Information Security. -Persons and companies engaged in the telecommunications business shall obtain and maintain certifications from an accredited certification body attesting to compliance with relevant ISO standards on information security, as prescribed by the DICT:Provided,That the maintenance of these certifications shall be a continuing qualification for retention of franchise or other authority to operate:Provided, further,That this section shall not apply to micro, small and medium enterprises under Republic Act No. 6977, otherwise known as the "Magna Carta for Micro, Small and Medium Enterprises (MSMEs)", as amended.