Article 7-3. Information Security Incident Response Service of the Law on Informatization

Home / RLA / Article 7-3. Information Security Incident Response Service of the Law on Informatization

1. Information Security Incident Response Service:

1) collects and analyzes information about information security incidents and current threats to information security, as well as provides recommendations for their elimination;

2) develops recommendations aimed at countering threats to information security;

3) informs the owners and owners of informatization facilities, as well as the National Information Security Coordination Center about reported incidents and threats to information security.

4) has the right to create its own interaction program or purchase an interaction program service from third parties in accordance with the Civil Code of the Republic of Kazakhstan;

5) within one working day from the moment of detection of a violation of personal data security, notify the authorized body in the field of personal data protection of such violation.

2. The Information Security Incident Response Service carries out its activities on the basis of a license to provide services for the identification of technical channels of information leakage and special technical means intended for operational search activities.

3. Employees of the information security incident response service are responsible for disclosing commercial or other legally protected secrets obtained by them as a result of their activities, in accordance with the laws of the Republic of Kazakhstan.

4. The requirement of paragraph 2 of this article does not apply to second-tier banks of the Republic of Kazakhstan, in which the functions of the information security incident response service are performed by their structural divisions.

The Law of the Republic of Kazakhstan dated November 24, 2015 No. 418-V SAM.

This Law regulates public relations in the field of informatization that arise in the territory of the Republic of Kazakhstan between government agencies, individuals and legal entities during the creation, development and operation of informatization facilities, as well as with state support for the development of the information and communication technology industry.

President

Republic of Kazakhstan

Constitution Law Code Standard Decree Order Decision Resolution Lawyer Almaty Lawyer Legal service Legal advice Civil Criminal Administrative cases Disputes Defense Arbitration Law Company Kazakhstan Law Firm Court Cases