Article 7-1. Competence of the authorized body of the Law On Cybersecurity

Home / Laws / Article 7-1. Competence of the authorized body of the Law On Cybersecurity

  Authorized body:

1) on the basis of and in pursuance of the main directions of the internal and foreign policy of the state, defined by the President of the Republic of Kazakhstan, and the main directions of the socio-economic policy of the state, its defense capability, security, and public order, developed by the Government of the Republic of Kazakhstan, forms a state policy in the field of cybersecurity in accordance with the legislation of the Republic of Kazakhstan;

2) performs strategic, regulatory, implementation and control functions;

3) develops common requirements in the areas of digitalization and cybersecurity;

4) approves the list of critically important digital objects, as well as the rules and criteria for classifying digital objects as critically important;

5) approves the methodology and rules for testing digital objects of the "digital government" and critical digital objects for compliance with cybersecurity requirements;

6) approves the rules for monitoring cybersecurity events of digital objects of state bodies in coordination with the National Security Committee of the Republic of Kazakhstan;

7) approves the rules for monitoring the cybersecurity of digital facilities of the digital government and critical digital facilities in coordination with the National Security Committee of the Republic of Kazakhstan;

8) approves the rules for monitoring the implementation of uniform requirements in the areas of digitalization and cybersecurity;

9) monitors the implementation of uniform requirements in the areas of digitalization and cybersecurity;

10) carries out state control in the field of digitalization, as well as over compliance with the requirements for an electronic document and an electronic digital signature;

11) sends instructions for the execution of violations of the requirements of the legislation of the Republic of Kazakhstan in the fields of digitalization and cybersecurity.;

12) coordinates the management of digital facilities in emergency situations of a social, natural and man-made nature, the introduction of a state of emergency or martial law;

13) participates in the commissioning of digital facilities of the digital government;

14) organizes assistance to owners, owners and users of digital objects in the safe use of digital technologies, including the prevention of illegal actions to obtain, copy, distribute, modify, destroy or block digital resources;

15) develops a national anti-crisis response plan for cybersecurity incidents;

16) determines the administrator and registrar of domain names, approves the rules for registration, use and distribution of domain names in the space of the Kazakhstan segment of the Internet;

17) approves the rules of operation of the unified national backup platform for storing digital resources, the frequency of backup of digital resources of critical digital objects;

18) approves the rules of operation of the unified Internet access gateway and the unified digital government e-mail gateway in coordination with the National Security Committee of the Republic of Kazakhstan;

19) approves the rules of operation of the National Source Code Repository;

20) approves protection profiles and the methodology for developing protection profiles;

21) approves rules for the exchange of information necessary to ensure cybersecurity between cybersecurity centers, industry cybersecurity centers and the National Cybersecurity Coordination Center;

22) issues conclusions in the field of cybersecurity on investment proposals and financial and economic justifications for budget investments based on the expertise of the state technical service;

23) approves technical documentation, including terms of reference, for the creation or development of digital facilities of the "digital government" for compliance with cybersecurity requirements based on the expertise of the state technical service, with the exception of digital facilities of special state bodies of the Republic of Kazakhstan;

24) approves the rules for the functioning of the program of interaction with cybersecurity researchers;

25) coordinates the activities of the National Institute for Development in the field of cybersecurity;

26) in case of non-fulfillment of the instruction or act on the elimination of violations in terms of compliance with requirements in the fields of digitalization and cybersecurity within the prescribed period, submits a lawsuit to the court to compel the subject to commit the actions specified in the instruction or act.;

27) processes personal data whose security has been violated in order to inform the subjects of personal data on the digital government web portal through a personal account;

28) exercise other powers provided for by this Law, other laws of the Republic of Kazakhstan, acts of the President of the Republic of Kazakhstan and the Government of the Republic of Kazakhstan.

The Law of the Republic of Kazakhstan dated November 24, 2015 No. 418-V SAM.

This Law regulates public relations in the field of informatization that arise in the territory of the Republic of Kazakhstan between government agencies, individuals and legal entities during the creation, development and operation of informatization facilities, as well as with state support for the development of the information and communication technology industry.

President

Republic of Kazakhstan

Constitution Law Code Standard Decree Order Decision Resolution Lawyer Almaty Lawyer Legal service Legal advice Civil Criminal Administrative cases Disputes Defense Arbitration Law Company Kazakhstan Law Firm Court Cases