RESOLUTION OF THE CABINET OF MINISTERS OF THE KYRGYZ REPUBLIC

of July 24, 2025 No. 439

About approval of the Procedure for maintaining the register of objects of critical information infrastructure of the Kyrgyz Republic

For the purpose of implementation of article 11 of the Law of the Kyrgyz Republic "About cyber security of the Kyrgyz Republic", according to articles 13, of the 17th constitutional Law of the Kyrgyz Republic "About the Cabinet of Ministers of the Kyrgyz Republic" the Cabinet of Ministers of the Kyrgyz Republic decides:

1. Approve the Procedure for maintaining the register of objects of critical information infrastructure of the Kyrgyz Republic according to appendix.

2. This resolution becomes effective after fifteen days from the date of official publication.

Appendix

to the Resolution of the Cabinet of Ministers of the Kyrgyz Republic of July 24, 2025 No. 439

Procedure for maintaining register of objects of critical information infrastructure of the Kyrgyz Republic

1. This Procedure for maintaining the register of objects of critical information infrastructure of the Kyrgyz Republic (further - the Procedure) determines rules of forming and maintaining the register of objects of critical information infrastructure of the Kyrgyz Republic (further - the register).

2. Maintaining the register is performed for the purpose of accounting of data on the objects of critical information infrastructure (further - KII) belonging on the property right, leases or other legal cause to subjects of KII.

3. The register is created and kept by authorized state body in the field of ensuring cyber security based on the act of the commission on categorization which shall contain data on object of KII and the category of the importance appropriated to it.

4. The following data are entered in the register:

1) name of object of KII;

2) name of the subject of KII;

3) address of object of KII;

4) address of the subject of KII;

5) data on interaction of object of KII with networks of telecommunication outside the subject of KII;

6) the information about persons operating object of KII;

7) the information about persons providing functioning of object of KII;

8) data on the structural division responsible for ensuring cyber security, and/or officer of cyber security of object of KII;

9) category of the importance which is appropriated to object of KII;

10) data about program and the software and hardware tools used on object of KII;

11) the measures applied to ensuring cyber security of object of KII.

5. The registration number consisting of groups of the digits and uppercase letters divided by virgules which has appearance is assigned to each object of KII included in the register: XXXXXX/X/X/XX.

The first group of signs contains number from 000001 to 999999, KII specifying sequence number of object in the register.

The second group of signs contains the number designating administrative and territorial unit in the territory of which there is object of KII:

1 - city of Bishkek;

2 - city of Osh;

3 - Batken Province;

4 - Jalal-Abad region;

5 - Naryn region;

6 - Osh region;

7 - Talas region;

8 - Chuy Region;

9 - Issyk kul region.

The third group of signs contains the number designating indicators of category of the importance of object of KII:

1 - I category;

2 - II category;

3 - III category.

The fourth group of signs contains the two-place number designating the sphere (area) of activities in which object of KII functions:

1 - social importance;

2 - economic importance;

3 - ecological importance;

4 - the importance for ensuring defense of the country, safety of the state and law and order.

Also the fourth group of signs contains uppercase letter which designates object type of KII:

"And" - information system;

"B" - information and telecommunication system;

"B1" - network of telecommunication;

"B2" - network of telecommunication public of the Kyrgyz Republic;

"In" - the database;

"" - data-processing center;

"D" - automated control system.

If object of KII functions in several spheres (areas) of activities, this information is entered in the column of the register containing additional data on object of KII.

6. Records about objects of KII in the register are kept consistently according to date of inclusion in it of data on object of KII.

7. In case of modification of data on object of KII the registration number of object of KII included in the register does not change.

8. In case of exception of object of KII of the register the registration number which is earlier assigned to such object is not used further.

Information from the register can be provided to the state bodies or legal entities performing functions on development, carrying out or realization of state policy in the field of ensuring cyber security or digitalization.

9. The aggregated data containing in the register are not subject to public distribution.

10. During forming and maintaining the register by authorized state body in the field of ensuring cyber security shall be provided:

- cyber security of information containing in the register;

- maintenance of the data on objects and subjects of KII containing in the register in current state;

- use of the data on objects and subjects of KII containing in the register by authorized state body in the field of ensuring cyber security only within the powers conferred to it in the field of ensuring cyber security of KII;

- completeness of data on objects and subjects of KII.

11. For the purpose of safety of the data included in the register, the authorized state body in the field of ensuring cyber security provides backup of the register.

 

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info