Article 7-8. Cybersecurity Incident Response Service of the Cybersecurity Act

Home / Laws / Article 7-8. Cybersecurity Incident Response Service of the Cybersecurity Act

1. Cybersecurity Incident Response Service:

1) collects and analyzes information about cybersecurity incidents and current cybersecurity threats, as well as provides recommendations for their elimination;

2) develops recommendations aimed at countering cybersecurity threats;

3) informs the owners and owners of digital facilities, as well as the National Cybersecurity Coordination Center about reported incidents and threats to cybersecurity;

4) has the right to create its own program of interaction with cybersecurity researchers or purchase the service of using the program of interaction with cybersecurity researchers from third parties in accordance with the Civil Code of the Republic of Kazakhstan;

5) notify the authorized body in the field of personal data protection of a violation of personal data security within three hours from the moment of its discovery;

6) ensures compliance with uniform requirements in the areas of digitalization and cybersecurity at its digital facilities.

2. The Cybersecurity Incident Response Service carries out its activities on the basis of a license to provide services for the identification of technical channels of information leakage and special technical means intended for operational search activities.

3. Employees of the cybersecurity incident response service are responsible for disclosing commercial or other legally protected secrets obtained by them as a result of their activities, in accordance with the laws of the Republic of Kazakhstan.

4. The requirement of paragraph 2 of this article does not apply to second-tier banks of the Republic of Kazakhstan, in which the functions of the cybersecurity incident response service are performed by their structural divisions.

The Law of the Republic of Kazakhstan dated November 24, 2015 No. 418-V SAM.

This Law regulates public relations in the field of informatization that arise in the territory of the Republic of Kazakhstan between government agencies, individuals and legal entities during the creation, development and operation of informatization facilities, as well as with state support for the development of the information and communication technology industry.

President

Republic of Kazakhstan

Constitution Law Code Standard Decree Order Decision Resolution Lawyer Almaty Lawyer Legal service Legal advice Civil Criminal Administrative cases Disputes Defense Arbitration Law Company Kazakhstan Law Firm Court Cases