Article 7-5. Cybersecurity Law Center for Cybersecurity

Home / Laws / Article 7-5. Cybersecurity Law Center for Cybersecurity

1. Cybersecurity Center:

1) carries out activities related to the detection, assessment, forecasting, localization, neutralization and prevention of cybersecurity threats to digital objects connected to the cybersecurity center;

2) takes measures to minimize cybersecurity threats, immediately informs the owner and (or) the owner of the digital facility, as well as the National Cybersecurity Coordination Center about the facts of detecting incidents and threats to cybersecurity;

3) monitors the cybersecurity of critical digital facilities that are not part of the digital facilities of the digital government;

4) exchanges information necessary to ensure the cybersecurity of digital objects connected to the cybersecurity center with the Cybersecurity industry Center, the National Cybersecurity Coordination Center and other cybersecurity centers;

5) collects, consolidates, analyzes, and stores information about cybersecurity events and incidents.;

6) provides owners and (or) owners of critical digital facilities with information necessary to ensure the cybersecurity of digital facilities, including information on cybersecurity threats, vulnerabilities in software, devices and technologies, ways to implement cybersecurity threats, prerequisites for cybersecurity incidents, as well as methods of their prevention and elimination;

7) ensures the safety of information of limited distribution that has become known to the cybersecurity center in the framework of its activities;

8) provides the National Cybersecurity Coordination Center with access to the event logs of digital objects of the "digital government" connected to the cybersecurity center;

9) has the right to create its own program of interaction with cybersecurity researchers or purchase the service of using the program of interaction with cybersecurity researchers from third parties in accordance with the Civil Code of the Republic of Kazakhstan;

10) ensures cybersecurity of automated process control systems;

11) notifies the authorized body in the field of personal data protection of a violation of personal data security within three hours from the moment of its discovery;

12) has the right, with the consent of the authorized body in the field of personal data protection, to process personal data whose security has been violated in order to inform personal data subjects on the digital government web portal through a personal account;

13) conducts a national technical audit of data processing centers;

14) ensures compliance with uniform requirements in the areas of digitalization and cybersecurity at its digital facilities;

15) conducts a cybersecurity audit;

16) monitors and logs digital cybersecurity events of digital objects, including those that collect and process personal data.

2. The Cybersecurity Center carries out its activities on the basis of a license to provide services for the identification of technical channels of information leakage and special technical means intended for operational search activities.

3. Employees of the cybersecurity center are responsible for disclosing commercial or other legally protected secrets obtained by them as a result of their activities, in accordance with the laws of the Republic of Kazakhstan.

4. The requirement of paragraph 2 of this article does not apply to law enforcement and special state bodies of the Republic of Kazakhstan, second-tier banks of the Republic of Kazakhstan, in which the functions of the cybersecurity center are performed by their structural divisions.

The Law of the Republic of Kazakhstan dated November 24, 2015 No. 418-V SAM.

This Law regulates public relations in the field of informatization that arise in the territory of the Republic of Kazakhstan between government agencies, individuals and legal entities during the creation, development and operation of informatization facilities, as well as with state support for the development of the information and communication technology industry.

President

Republic of Kazakhstan

Constitution Law Code Standard Decree Order Decision Resolution Lawyer Almaty Lawyer Legal service Legal advice Civil Criminal Administrative cases Disputes Defense Arbitration Law Company Kazakhstan Law Firm Court Cases