In accordance with the provisions of Article 4 of Decree No. 2-24-921 of 18 Rabii II 1446 (22 October 2024) concerning the use of Cloud service providers by entities and critical infrastructures managing information systems or sensitive data, the General Directorate of Information Systems Security has developed the framework of qualification requirements for Cloud service providers. Published by Order of the Head of Government No. 3-17-25 of 7 Safar 1447 (1 August 2025), the reference framework of qualification requirements for Cloud service providers defines the organizational, technical, legal, and governance criteria that providers must meet in order to obtain the qualification granted by the competent national authority.