ORDER OF THE MINISTER OF THE DEFENSE AND AEROSPACE INDUSTRY OF THE REPUBLIC OF KAZAKHSTAN

of March 28, 2018 No. 51/Tax Code

About approval of the Technique of carrying out certification inspection of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security

According to the subitem 6) article 7-1 of the Law of the Republic of Kazakhstan of November 24, 2015 "About informatization" PRIKAZYVAYU:

1. Approve the enclosed Technique of carrying out certification inspection of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security.

2. Declare invalid the order of the acting minister on investments and development of the Republic of Kazakhstan of January 28, 2016 No. 108 "About approval of the Technique of carrying out certification inspection of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security" (it is registered in the Register of state registration of regulatory legal acts for No. 13236, it is published on March 4, 2016 in information system of law of Ad_let).

3. To provide to committee on information security of the Ministry of the defense and aerospace industry of the Republic of Kazakhstan in the procedure established by the legislation:

1) state registration of this order in the Ministry of Justice of the Republic of Kazakhstan;

2) within ten calendar days from the date of state registration of this order in the Ministry of Justice of the Republic of Kazakhstan the direction it the copy in paper and electronic form in the Kazakh and Russian languages in the Republican state company on the right of economic maintaining "The republican center of legal information" for official publication and inclusion in Reference control bank of regulatory legal acts of the Republic of Kazakhstan;

3) within ten calendar days after state registration of this order the direction it the copy on official publication in periodic printing editions;

4) placement of this order on Internet resource of the Ministry of the defense and aerospace industry of the Republic of Kazakhstan after its official publication;

5) within ten working days after state registration of this order in the Ministry of Justice of the Republic of Kazakhstan submission to Legal department of the Ministry of the defense and aerospace industry of the Republic of Kazakhstan of data on execution of actions, according to subitems 1), 2),3) and 4) this Item.

4. To impose control of execution of this order on the supervising vice-minister of the defense and aerospace industry of the Republic of Kazakhstan.

5. This order becomes effective after ten calendar days after day of its first official publication.

Approved by the Order of the Minister of the defense and aerospace industry of the Republic of Kazakhstan of March 28, 2018 No. 51/Tax Code

Technique of carrying out certification inspection of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security

Chapter 1. General provisions

1. This Technique of carrying out certification inspection of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security (further - the Technique) is developed according to the subitem 6) of article 7-1 of the Law of the Republic of Kazakhstan of November 24, 2015 "About informatization" (further - the Law) and the Rules of carrying out certification of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security approved by the order of the Government of the Republic of Kazakhstan of May 23, 2016 No. 298.

2. This Technique is intended for carrying out certification inspection of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security.

3. In this Technique the following determinations and reducings are used:

1) data assets - databases, system documentation, user guides, accounting materials, procedures of operation or support of object of certification, plans for providing continuity of functioning of information support and other documentation;

2) information system (further - the IC) - the organizational arranged set of the information and communication technologies, service personnel and technical documentation realizing certain technological actions by means of information exchange and intended for the solution of specific functional objectives;

3) certification of information system, information communication framework of "the electronic government" and Internet resource of state body on compliance to requirements of information security (further - certification) - organizational and technical actions for determination of condition of security of objects of certification, and also their compliance to requirements of information security;

4) technical documentation on information security (further - TD on IB) - set of the documents developed according to single requirements in the field of information and communication technologies and information security support (further - ET) and regulating general requirements, the principles and rules on information security support of object of certification;

5) information security in the field of informatization (further - information security) - condition of security of electronic information resources, information systems and information and communication infrastructure from external and internal threats;

6) authentication - check of accessory to the user (the subject of access) of the identifier shown them and confirmation of its authenticity;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info