Unofficial translation (c) Soyuzpravoinform LLC

ORDER OF ADMINISTRATION OF PUBLIC SERVICE OF SPECIAL COMMUNICATION AND INFORMATION SECURITY OF UKRAINE

of August 30, 2023 No. 771

About approval of the Regulations on system of secure access of state bodies to the Internet

According to Item of 1 part two and part five of article 8 of the Law of Ukraine "About the basic principles of ensuring cyber security of Ukraine", Item 9 of general requirements to cyberprotection of the objects of critical infrastructure approved by the resolution of the Cabinet of Ministers of Ukraine of June 19, 2019 No. 518, of subitem 95-7 of item 4 and Item 10 of the Regulations on Administration of Public service of special communication and information security of Ukraine approved by the resolution of the Cabinet of Ministers of Ukraine of September 3, 2014 No. 411, for the purpose of ensuring normative and legal settlement of functioning of system of secure access of state bodies to the Internet of PRIKAZYVAYU:

1. Approve Regulations on system of secure access of state bodies to the Internet which are applied.

2. To provide to department of cyberprotection of Administration of Public service of special communication and information security of Ukraine in accordance with the established procedure submission of this order on state registration in the Ministry of Justice of Ukraine.

3. This order becomes effective from the date of its official publication.

4. To impose control over the implementation of this order on the vice-chairman of Public service of special communication and information security of Ukraine according to distribution of obligations.

Approved by the Order of Administration of Public service of special communication of information security of Ukraine of August 30, 2023 No. 771

Regulations on system of secure access of state bodies to the Internet

I. General provisions

1. This Provision determines appointment, structure and questions of functioning of system of secure access of state bodies to the Internet.

2. In this Provision terms are used in such value:

The DDoS-attack (DistributedDenialofservice-распределенная the attack to refusal in servicing) - the impact on the information (automated), electronic communication, information and communication system (further - IKS) consisting in sending large number of external requests from different IP addresses for use of the resources placed in it with intention to make the specified resources unavailable to users;

DNS (Domain Name System - system of domain names) - the hierarchical distributed system of transformation of name of host to the IP address;

DNS-server-hardware and software system which contains the database of IP addresses and the related names of hosts;

The IP address - the unique numerical number used for identification of the equipment in the network built with use of standards and rules of transfer of packets of data (network traffic);

secure access to the Internet Access of the Final (Terminal) Equipment of the User and His Logical Connection with Final Points of the Internet network with observance of the accepted information security policies that is provided with services in cyberprotection and mechanisms of safety of complex system of information security of system of secure access of state bodies to the Internet with the confirmed compliance;

users of system of secure access of state bodies to the Internet (further - users of System) - users and special users of national telecommunication network;

policy of information safety set of the requirements, rules, restrictions, recommendations, etc. regulating procedure for information processing and directed to information security from certain threats;

system of secure access of state bodies to the Internet (further - System) - set program and software and hardware (further - means of System) the state center of cyberprotection of Public service of special communication and information security of Ukraine (further - DTsKZ Gos-spetssvyazi), united in the single complex intended for providing secure access to the Internet.

3. Other terms are used in the value given in the Laws of Ukraine "About information security in information and communication systems", "About electronic communications", "About the basic principles of ensuring cyber security of Ukraine", the procedure for functioning of national telecommunication network and Rules of provision of services provided with use of national telecommunication network, approved by the resolution of the Cabinet of Ministers of Ukraine of December 16, 2020 No. 1358.

II. Appointment and structure of System

1. The system enters technological infrastructure of cyberprotection of organizational and technical model of cyberprotection and provides interaction of national telecommunication network with the Internet in the part concerning open information.

2. The system is intended for providing the organization of the IKS logical connection of users of System with the Internet through the protected Internet access node with allocation of public or private IP addresses and protection of the specified IKS against the network attacks with use of functionality of the means of System capable to actively counteract the target attacks, way:

creation of perimeter of safety which separates from internal networks of users of System the network attacks;

protection of IKS of users of system against the network attacks;

concealment of structure of internal networks of users of System;

detection and blocking of the network attacks to public services and resources of users of System;

carrying out anti-virus and antispam filtering of packets of data (network traffic);

holding other actions determined by information security policies of users of System.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info