of June 15, 2022 No. 388
About approval of the Concept of the Information system "State Register of Incidents of Cybernetic Safety"
Based on Item d) article 22 of the Law No. 467/2003 on informatization and the state information resources (The official monitor of the Republic of Moldova, 2004, Art. No. 6-12, 44), with subsequent changes, and article 16 of the Law No. 71/2007 on registers (The official monitor of the Republic of Moldova, 2007, Art. No. 70-73, 314), with subsequent changes, DECIDES: the Government
1. Approve the Concept of the Information system "State Register of Incidents of Cybernetic Safety" it (is applied).
2. Create the State register of incidents of cybernetic safety belonging to the state.
3. "Service of information technologies and cybernetic safety" to provide to public institution creation, implementation, functioning and development of the Information system "State Register of Incidents of Cybernetic Safety".
4. To enable the realization of provisions of this resolution for the account and within the financial resources allocated from the government budget, and other means according to the legislation.
the Deputy Prime Minister on digital development
Yury to Tsurkan
Approved by the Order of the Government of the Republic of Moldova of June 15, 2022 No. 388
According to part provisions (1) article 10 of the Law No. 467/2003 on informatization and the state information resources, the Order of the Government No. 482/2020 about approval of some measures necessary for ensuring cybernetic safety at the ministerial level, and about modification of the Order of the Government No. 414/2018 about measures for consolidation of data centers in public sector and rationalization of administration of the state information systems, the Public organization "Service of Information Technologies and Cybernetic Safety" (further - SITKB) as the Government center of the response to incidents of cybernetic safety (further - CERT Gov) which is single Item of communication and transmission of messages on incidents of cybernetic safety of the Government ensures cybernetic safety of the state information systems and resources.
One of obligations of SITKB as CERT Gov is creation and commissioning of the State register of incidents of cybernetic safety. Also, according to subitems 7) and 8) of Item 5 of the Measures necessary for ensuring cybernetic safety at the ministerial level approved by the Order of the Government No. 482/2020, the obligation of CERT Gov includes provision of information platform of strategic communication with public subjects, and also ensuring accounting of the revealed or reported threats, vulnerabilities and incidents of cybernetic safety.
Now for the message on incidents of cyber security and other related data semi-automatic processes are used that is integrated to many risks concerning: information security, integrity of data, change history, etc.
The reported incidents are documented according to in advance determined template (form of the message on cyber security incidents) and go by e-mail, with registration manually in the database in the .xls format. The current method does not provide the comprehensive analysis which would allow to establish the reasons and areas which are exposed to risks of safety. Record and monitoring of all types of incidents of cybernetic safety will improve the aspects connected with: determination, classification, extraction of lessons from incidents.
With respect thereto there is need of creation and implementation of the Information system "State Register of Incidents of Cybernetic Safety" (further - the IC GRIKB). Its purpose is improvement of the processes performed within CERT Gov, method of incident management of cybernetic safety, and also simplification of the procedure of the message on them to departmental structures of the Government like CERT.
Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info
Database include more 50000 documents. You can find needed documents using search system. For effective work you can mix any on documents parameters: country, documents type, date range, teams or tags.
More about search system
If you cannot find the required document, or you do not know where to begin, go to Help section.
In this section, we’ve tried to describe in detail the features and capabilities of the system, as well as the most effective techniques for working with the database.
You also may open the section Frequently asked questions. This section provides answers to questions set by users.