Article 10. Cybersecurity Industry Center of the Cybersecurity Act

Home / Laws / Article 10. Cybersecurity Industry Center of the Cybersecurity Act

1. The Cybersecurity Industry Center organizes and coordinates the provision of cybersecurity by the owners or owners of digital objects of the relevant industry (sphere) of state regulation, including:

1) carries out activities related to the analysis, assessment, forecasting and prevention of threats to the cybersecurity of organizations;

2) exchanges information necessary to ensure cybersecurity with the National Cybersecurity Coordination Center;

3) collects, consolidates, analyzes and stores information about cybersecurity events and incidents received from owners or owners of digital objects in the relevant industry (sphere);

4) provides information necessary to ensure cybersecurity to the owners or owners of digital objects of the relevant industry (sphere), including information on cybersecurity threats, vulnerabilities in digital objects of the relevant industry (sphere), prerequisites for the occurrence of cybersecurity incidents, as well as methods of their prevention and elimination.;

5) ensures the safety of information of limited distribution that has become known to the industry cybersecurity center in the framework of its activities;

6) notifies the authorized body in the field of personal data protection of a violation of personal data security within three hours from the moment of its discovery;

7) coordinates the provision of cybersecurity of automated process control systems and process control systems that are part of critical digital facilities, in accordance with the procedure and deadlines established by the internal regulations of the cybersecurity industry center.;

8) develops, on the basis of uniform requirements in the fields of digitalization and cybersecurity, additional requirements for ensuring cybersecurity in the relevant branch (sphere) of state regulation.

2. Employees of the cybersecurity industry center are responsible for disclosing commercial, banking or other legally protected secrets obtained by them as a result of their activities, in accordance with the laws of the Republic of Kazakhstan.

3. To carry out its functions, the Cybersecurity Industry Center uses a digital facility for collecting, processing and exchanging information on cybersecurity events and incidents, the procedure for connecting and using which by industry organizations is determined by the authorized body of the relevant industry (sphere) of state regulation.

The Law of the Republic of Kazakhstan dated November 24, 2015 No. 418-V SAM.

This Law regulates public relations in the field of informatization that arise in the territory of the Republic of Kazakhstan between government agencies, individuals and legal entities during the creation, development and operation of informatization facilities, as well as with state support for the development of the information and communication technology industry.

President

Republic of Kazakhstan

Constitution Law Code Standard Decree Order Decision Resolution Lawyer Almaty Lawyer Legal service Legal advice Civil Criminal Administrative cases Disputes Defense Arbitration Law Company Kazakhstan Law Firm Court Cases