Iranian Civil Defense Agency

The Iranian Civil Defense Agency is a governmental body tasked with protecting the nation’s population and critical infrastructure from a range of threats, including cyber attacks. It monitors and responds to incidents that affect essential services such as fuel distribution, banking, media broadcasting, and industrial production. When cyber disruptions occur, the agency issues public acknowledgments, coordinates investigations with national cybersecurity authorities, and provides updates on the status of affected systems. For example, it confirmed a cyber attack on Iran’s central bank in September 2022 and noted that the incident was under review by relevant authorities. In December 2023 the agency oversaw the response to a cyberattack that disrupted fuel services at roughly seventy percent of the country’s petrol stations, requiring operators to revert to manual processes. It also commented on cyber intrusions targeting state television and radio broadcasts in January 2022, the steel industry in June 2022, and the exposure of bank card data in November 2019, indicating its role as a point of contact for such events.

The agency’s distinguishing attribute lies in its role as the point of contact for cyber incidents affecting national infrastructure, where it acknowledges attacks, coordinates investigations with national cybersecurity authorities, and communicates status updates to the public. It has performed this function for events ranging from the central bank breach in September 2022 to the fuel station disruption in December 2023, the steel industry intrusion in June 2022, the state television hijack in January 2022, and the bank card data exposure in November 2019. Headquarters are located in Iran, situating the organization within the country’s central coordination network for threats to civilian safety. While specific details about its internal size, staffing, or budget are not provided in the sources, the frequency with which it appears in official statements underscores its active involvement in cyber defense. Its communications consistently stress that investigations proceed without disrupting essential emergency services, indicating a deliberate approach to response. Collectively, these observed actions define the Iranian Civil Defense Agency as a substantive participant in Iran’s efforts to protect critical systems from cyber threats.