Unofficial transfer (c) Soyuzpravoinform LLC

RESOLUTION OF THE CABINET OF MINISTERS OF UKRAINE

of June 21, 2024 No. 737

About implementation of the pilot project on protection and information processing in information communications system of management of logistic providing

The Cabinet of Ministers of Ukraine decides:

1. Agree with the offer of the Ministry of Defence concerning realization in the period of warlike situation, but not longer than two years from the date of entry into force of this resolution of the pilot project on protection and information processing in information communications system of management of logistic providing (further - the pilot project).

2. Approve the Procedure for implementation of the pilot project on protection and information processing in the enclosed information communications system of management of logistic providing.

3. Determine that:

protection and information processing in information communications system of management of logistic providing is performed taking into account the features established by the Procedure approved by this resolution;

the realization of the pilot project is enabled for the account and within the means provided in the Government budget for the Ministry of Defence for the corresponding year and also at the expense of the means of international aid and other financing sources which are not prohibited by the legislation.

4. To the Ministry of Defence:

create working group with involvement of representatives of the interested state bodies for maintenance of implementation process of the pilot project;

tax not later than in two months after completion of implementation of the pilot project to the Cabinet of Ministers of Ukraine the report on results of its realization and the offer on entering of corresponding changes into legal acts.

Approved by the Resolution of the Cabinet of Ministers of Ukraine of June 21, 2024, No. 737

Procedure for implementation of the pilot project on protection and information processing in information communications system of management of logistic providing

1. This Procedure determines the mechanism of implementation of the pilot project by protection and information processing in information communications system of management of logistic providing (further - the pilot project).

2. In this Procedure terms are used in the value given in the Laws of Ukraine "About information", "About information protection in information communications systems", "About defense purchases" and "About electronic communications".

3. The purpose of the pilot project is implementation of testing of the latest approaches on information security support in case of information processing in information communications system of management of logistic providing (further - information system), namely: providing technical, cryptographic information protection and cyberprotection of information communications systems which are based on experience of the best international the practician of NATO member states.

4. Coordinator of the pilot project is the Ministry of Defence.

5. Participants of the pilot project are structural divisions of the Ministry of Defence, military units and divisions of Armed Forces, Services of the state customer, Administration of Gosspetssvyaz.

6. Protection and information processing in information system is performed with observance of the following requirements:

determination of extent of access restriction to information which is subject to the automated processing in information system and the requiring protection is performed by the commission consisting of representatives of the Ministry of Defence and Armed Forces;

information protection in information system is performed with observance of requirements of the legislation in the field of information protection and the Administrative arrangements on protection of information with limited access between the government of Ukraine and the North Atlantic Treaty Organization ratified by the Law of Ukraine of May 24, 2017 No. 2068-VIII;

assessment of sufficiency of the entered measures for information protection in information system is carried out according to requirements of regulating documents concerning estimation of security of information in information communications systems.

7. In order to avoid potential overestimate of extent of access restriction to information differentiation of information access in information system is performed by equipment rooms and/or software. The list of the information which is subject to processing and requiring protection in information system is created based on data concerning the carried-out differentiation of information access.

8. Official (office) persons of participants of the pilot project (further - users) use functionality of information system according to certain level of access rights.

Level of access rights is determined by role model which considers the user's position, its belonging to element of military structure and the list of the transactions permitted for accomplishment according to the approved requirements to information system. In information system complete record of all transactions and actions of users, in particular administrators of information system is kept. Removal and making of other actions according to information without entering of the corresponding records into system logs is not allowed.

9. Connection of information system to wide area networks of data transmission can be performed with use of means technical and cryptographic information protection which are used by NATO member states and are intended for information protection with extent of access restriction on NATO RESTRICTED and higher extents of access restriction (further - remedies).

10. Remedies are used as a part of information system under following conditions:

remedies shall have appropriate certificates on safety of NATO and are entered to the list of the certified funds for NIAPC Product Catalog;

use of remedies is performed according to requirements of the regulating document of NATO-Security of Within The North Atlantic Treaty Organization (NATO) C-M (2002)49 and the supporting directives;

operation of remedies in information system is performed on the basis of certificates on safety of NATO (results of the certified testing accepted by NATO member states) from the list of certified funds for NIAPC Product Catalog and documentation in which requirements to safety of application of means and cryptomaterials (key data) to such means are determined.

11. Use of means of cryptographic information protection of production of NATO member states is allowed on condition of control from Administration of Gosspetssvyaz, the Ministry of Defence and the General Staff of Armed Forces on distribution of cryptographic materials (key data) to such means.

12. The realization of the pilot project is enabled on the following stages:

the first - ensuring differentiation of information access in information system. Extreme term-III quarter 2024;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info