THE ORDER OF OPERATIONAL ANALYTICAL CENTER IN CASE OF THE PRESIDENT OF THE REPUBLIC OF BELARUS

of February 20, 2020 No. 66

About measures for implementation of the Presidential decree of the Republic of Belarus of December 9, 2019 No. 449

In pursuance of item 4 and the paragraph of third Item 5 of the Presidential decree of the Republic of Belarus of December 9, 2019 "About enhancement of state regulation in the field of information security" I ORDER to No. 449:

1. Approve:

The regulations on procedure for technical and cryptographic information security in the information systems intended for information processing, distribution and (or) provision of which are limited (are applied);

The regulations on procedure for certification of systems of information security of the information systems intended for information processing distribution and (or) provision of which are limited (are applied);

The regulations on procedure for the technical and cryptographic information security processed on crucial objects of informatization (are applied);

The regulations on procedure for submission to Operational analytical center in case of the President of the Republic of Belarus of data on events of information security, condition of technical and cryptographic information security (are applied);

The regulations on procedure for maintaining the State register of crucial objects of informatization (are applied).

2. Determine:

form of the conclusion about compliance of object of informatization to criteria of reference of objects of informatization to crucial and to indicators of level of probable damage to national interests of the Republic of Belarus according to appendix 1;

form of the conclusion about consolidation of crucial objects of informatization according to appendix 2.

3. Make changes to the following orders of Operational analytical center in case of the President of the Republic of Belarus:

3.1. in the order of Operational analytical center in case of the President of the Republic of Belarus of July 29, 2013 No. 48 "About approval of the Instruction about procedure of control of technical protection of the state secrets":

state preamble in the following edition:

"Based on the paragraph of the fourth of article 9 of the Law of the Republic of Belarus of July 19, 2010 "About the state secrets" I ORDER to No. 170-Z:";

in Item 1:

"enclosed" to exclude the word;

add Item with the word "(is applied)";

To be reworded as follows the instruction about procedure of control of technical protection of the state secrets approved by this order it (is applied);

3.2. in the order of Operational analytical center in case of the President of the Republic of Belarus of August 26, 2013 No. 60 "About approval of the Regulations on procedure for conducting state examination of means of technical and cryptographic information security":

state preamble in the following edition:

"Based on the paragraph of third subitem 6.6 of Item 6 of the Regulations on technical and cryptographic information security approved by the Presidential decree of the Republic of Belarus of April 16, 2013 No. 196, I ORDER:";

in Item 1:

exclude the word "enclosed";

add Item with the word "(is applied)";

in Regulations on the procedure for conducting state examination of means of technical and cryptographic information security approved by this order:

state Item 1 in the following edition:

"1. In this Provision the procedure for conducting state examination of means of technical and cryptographic information security, except for means encoded, other types of special communication and cryptographic remedies of the state secrets is determined.";

in Item 2:

the paragraph one to state in the following edition:

"2. For the purposes of this provision terms in the values determined in Regulations on technical and cryptographic information security and also the following terms and their determinations are applied:";

" (further - TNPA)" to exclude from word paragraph two;

the fourth to exclude the paragraph;

to exclude from Item 11 of the word "to this Provision";

to exclude from part two of Item 12 of the word "and seal";

to exclude paragraph two of Item 14;

in paragraph four of Item 17 and the paragraph third Item 19 part two the word "location" shall be replaced with words "location";

to exclude from part one of Item 20 of the word "to this Provision";

in Item 34 part two:

words", the foreign organization" to exclude;

after the word "middle name" to add part with words "(if that is available) and the residence";

to be reworded as follows appendices 1 and 2 to this Provision (are applied);

3.3. in the Instruction about procedure for carrying out accreditation of service providers in the State management system open keys of verification of the digital signature of the Republic of Belarus and control of observance of conditions of the accreditation approved by the order of Operational analytical center in case of the President of the Republic of Belarus of November 29, 2013 No. 89:

from Item 2 of the word", technical regulatory legal acts in the field of information security" to exclude;

to be reworded as follows appendices 1 and 3 to this Instruction (are applied);

3.4. in the Regulations on the State management system open keys of verification of the digital signature of the Republic of Belarus approved by the order of Operational analytical center in case of the President of the Republic of Belarus of December 10, 2015 No. 118:

from paragraph one of Item 2 of the word "in the Republic of Belarus" and "technical regulatory legal acts," to exclude;

in part two of Item 6 of the word "NTsEU and Approved" shall be replaced with words "and the approved NTsEU in coordination with".

4. Since January 1, 2022 submission of the data specified in subitem 3.1 of Item 3, subitems 4.1 and 4.2 of item 4 of the Regulations on procedure for the submission to Operational analytical center in case of the President of the Republic of Belarus of data on events of information security, condition of technical and cryptographic information security approved by this order is performed by means of the nation-wide automated information system.

5. Action of paragraphs two and third Item 1 of this order does not extend on:

the information systems intended for information processing, distribution and (or) provision of which it is limited (further in this Item - information systems), put into operation to its introduction in force, on effective period of the certificate of compliance of system of information security of information system to requirements for information security (further in this Item - the certificate of compliance);

the newly created or modernized information systems on which on the date of entry into force of this order private specifications or tasks on safety are approved. Certification of systems of information security of such information systems and their input in operation are performed according to the legislation existing before entry into force of this order.

After effective period of the certificate of compliance owners (owners) of the information systems specified in part one of this Item carry out repeated certification (address for carrying out repeated certification) systems of information security of information systems according to the procedure, established by this order.

Owners (owners) of the information systems specified in part one of this Item, this order having the right to be guided without the transitional provisions determined by parts one and the second this Item.

6. The security systems of crucial objects of informatization created before entry into force of this order are subject to reduction in compliance with requirements of this order in six-months time from the date of its introduction in force.

7. Recognize invalid:

the order of Operational analytical center in case of the President of the Republic of Belarus of December 20, 2011 No. 96 "About some measures for implementation of the Presidential decree of the Republic of Belarus of October 25, 2011 No. 486";

the order of Operational analytical center in case of the President of the Republic of Belarus of April 30, 2012 No. 42 "About approval of the Instruction about procedure for carrying out external control behind safety of crucial objects of informatization";

the order of Operational analytical center in case of the President of the Republic of Belarus of July 29, 2013 No. 49 "About approval of the Regulations on procedure for provision in Operational analytical center in case of the President of the Republic of Belarus of data on condition of technical information security";

subitems 1.3 and 1.4 of Item 1 of the order of Operational analytical center in case of the President of the Republic of Belarus of July 30, 2013 No. 51 "About some measures for implementation of the Presidential decree of the Republic of Belarus of April 16, 2013 No. 196";

the order of Operational analytical center in case of the President of the Republic of Belarus of August 30, 2013 No. 62 "About some questions of technical and cryptographic information security";

the order of Operational analytical center in case of the President of the Republic of Belarus of January 16, 2015 No. 3 "About entering of amendments and changes into the order of Operational analytical center in case of the President of the Republic of Belarus of August 30, 2013 No. 62";

the order of Operational analytical center in case of the President of the Republic of Belarus of August 26, 2015 No. 77 "About modification and amendments in the order of Operational analytical center in case of the President of the Republic of Belarus of July 29, 2013 No. 49";

subitems 1.1 and 1.2 of Item 1 and Item 2 of the order of Operational analytical center in case of the President of the Republic of Belarus of October 11, 2017 No. 64 "About introduction of amendments to some orders of Operational analytical center in case of the President of the Republic of Belarus";

the order of Operational analytical center in case of the President of the Republic of Belarus of October 12, 2018 No. 151 "About approval of the Regulations on safety of crucial objects of informatization".

8. This order becomes effective since March 14, 2020.

 

Appendix 1

to the Order of Operational analytical center in case of the President of the Republic of Belarus of February 20, 2020 No. 66

Form

 

I CLAIM

________________________________

(name of position

________________________________

head of the organization)

________________________________

(signature, initials, surname)

__. __. 20 ___

The conclusion about compliance of object of informatization to criteria of reference of objects of informatization to crucial and to indicators of level of probable damage to national interests of the Republic of Belarus

Commission _______________________________________________________________

(full name of the owner of object of informatization)

in structure:

chairman ________________________________________________________________,

members of the commission: _____________________________________________________________

determined that object of informatization __________________________________________

(full name

_____________________________________________________________________________

object of informatization)

meets reference conditions to crucial objects of informatization based on its compliance to criterion (criteria) _______________________________

(name of criterion (criteria)

_____________________________________________________________________________

references of object of informatization to crucial objects of informatization)

with indicator (indicators) of level of probable damage to national interests _____________________________________________________________________________

(indicator (indicators) of level of probable damage

_____________________________________________________________________________

to national interests of the Republic of Belarus)

 

Commission chairman	_____________________	________________________
	(signature)	(initials, surname)
Members of the commission:	_____________________	________________________
	(signature)	(initials, surname)
	_____________________	________________________
	(signature)	(initials, surname)

 

Appendix 2

to the Order of Operational analytical center in case of the President of the Republic of Belarus of February 20, 2020 No. 66

Form

 

I CLAIM

________________________________

(name of position

________________________________

head of the organization)

________________________________

(signature, initials, surname)

__. __. 20 ___

Conclusion about consolidation of crucial objects of informatization

Commission _______________________________________________________________

(full name of the owner of crucial objects of informatization)

in structure:

chairman _________________________________________________________________

members of the commission: _____________________________________________________________

determined that crucial objects of informatization _______________________

(full name

_____________________________________________________________________ in connection with

crucial objects of informatization)

_____________________________________________________________________________

(the specific reasons of legal, organizational or technical nature are specified,

_____________________________________________________________________________

 the informatizations which formed the basis for consolidation of crucial objects)

are subject to consolidation in one crucial object of informatization _____________________________________________________________________________

(full name

_____________________________________________________________________________

crucial object of informatization)

 

Commission chairman	_____________________	________________________
	(signature)	(initials, surname)
Members of the commission:	_____________________	________________________
	(signature)	(initials, surname)
	_____________________	________________________
	(signature)	(initials, surname)

 

Approved by the Order of Operational analytical center in case of the President of the Republic of Belarus of February 20, 2020 No. 66

The regulations on procedure for technical and cryptographic information security in the information systems intended for information processing, distribution and (or) provision of which are limited

Chapter 1. General provisions

1. In this Provision according to the paragraph the second subitem 6.4 of Item 6 of the Regulations on technical and cryptographic information security approved by the Presidential decree of the Republic of Belarus of April 16, 2013 No. 196, determines procedure for technical and cryptographic information security in the information systems intended for information processing, distribution and (or) provision of which is limited, not carried to the state secrets.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info