Article 7-2. Operational Information Security Center of the Law on Informatization

Home / RLA / Article 7-2. Operational Information Security Center of the Law on Informatization

1. Operational Information Security Center:

1) carries out activities related to the detection, assessment, forecasting, localization, neutralization and prevention of threats to information security of information and communication infrastructure, informatization facilities connected to the operational information security center;

2) takes measures to minimize threats to information security, immediately informs the owner of the information and communication infrastructure, as well as the National Information Security Coordination Center about the facts of identifying incidents and threats to information security;

3) monitors information security of critical information and communication infrastructure facilities, informatization facilities that are not related to the informatization facilities of the "electronic government";

4) carries out the exchange of information necessary to ensure the information security of information facilities connected to the operational information security center with the National Information Security Coordination Center and other operational information security centers;

5) collects, consolidates, analyzes and stores information about information security events and incidents;

6) provides owners of critical information and communication infrastructure facilities with information necessary to ensure the information security of information and communication infrastructure facilities, including information on security threats, vulnerabilities in software, equipment and technologies, ways to implement information security threats, prerequisites for information security incidents, as well as methods for their prevention and elimination;

7) ensures the safety of information of limited distribution that has become known to the operational information security center in the framework of its activities;

8) provides the National Information Security Coordination Center with access to the event logs of e-government informatization facilities connected to the operational information security center.

9) has the right to create its own interaction program or purchase an interaction program service from third parties in accordance with the Civil Code of the Republic of Kazakhstan;

10) within one business day from the moment of detection of a violation of personal data security, notify the authorized body in the field of personal data protection of such violation.

IZPI's note! Article 7-2 is provided to be supplemented by subparagraph 11) in accordance with the Law of the Republic of Kazakhstan dated 07/05/2024 No. 115-VIII (effective six months after the date of its first official publication).

2. The Operational Information Security Center carries out its activities on the basis of a license to provide services for the identification of technical channels of information leakage and special technical means intended for operational search activities.

3. Employees of the operational information security center are responsible for disclosing commercial or other legally protected secrets obtained by them as a result of their activities, in accordance with the laws of the Republic of Kazakhstan.

4. The requirement of paragraph 2 of this article does not apply to law enforcement and special state bodies of the Republic of Kazakhstan, second-tier banks of the Republic of Kazakhstan, in which the functions of the operational information security center are performed by their structural divisions.

The Law of the Republic of Kazakhstan dated November 24, 2015 No. 418-V SAM.

This Law regulates public relations in the field of informatization that arise in the territory of the Republic of Kazakhstan between government agencies, individuals and legal entities during the creation, development and operation of informatization facilities, as well as with state support for the development of the information and communication technology industry.

President

Republic of Kazakhstan

Constitution Law Code Standard Decree Order Decision Resolution Lawyer Almaty Lawyer Legal service Legal advice Civil Criminal Administrative cases Disputes Defense Arbitration Law Company Kazakhstan Law Firm Court Cases