Unofficial transfer (c) Soyuzpravoinform LLC

RESOLUTION OF THE CABINET OF MINISTERS OF UKRAINE

of November 5, 2025 No. 1424

About approval of the Procedure for development, acceptance, modification, canceling, renewal of action, promulgation and introduction of standards cryptographic and information technical protection, cyberprotection, counteraction to technical investigations

According to Item "About Public service of special communication and information protection of Ukraine" the Cabinet of Ministers of Ukraine decides 102 parts one of article 14 of the Law of Ukraine:

Approve the Procedure for development, acceptance, modification, canceling, renewal of action, promulgation and introduction of standards cryptographic and information technical protection, cyberprotection, counteraction to technical investigations which is applied.

Approved by the Resolution of the Cabinet of Ministers of Ukraine of November 5, 2025, No. 1424

Procedure for development, acceptance, modification, canceling, renewal of action, promulgation and implementation of standards cryptographic and information technical protection, cyberprotection, counteraction to technical investigations

1. This Procedure establishes the mechanism of development, acceptance, modification, canceling, renewal of action, promulgation and introduction of standards cryptographic and information technical protection, cyberprotection, counteraction to technical investigations (further - information protection standards).

Information protection standards are applied on voluntary basis, except cases if obligation of their application is established by regulatory legal acts.

Information processing, containing in information protection standards, them the components and other documents containing information with limited access which is created during their development, acceptance, modification, canceling, renewal of action, promulgation and introduction, is carried out according to the laws of Ukraine "About access to public information" and "About the state secret", the Procedure for the organization and providing the mode of privacy in state bodies, local government bodies, at the companies, in organizations and the organizations, the Cabinet of Ministers of Ukraine approved by the resolution of December 18, 2013 No. 939, of the Standard instruction about procedure for accounting, storage, use and destruction of the documents and other material information mediums containing office information, Ukraine approved by the resolution of the Cabinet of Ministers of October 19, 2016 No. 736 (The Official Bulletin of Ukraine, 2016 No. 85, Art. 2783), and this Procedure.

2. In this Procedure terms are used in the following value:

lifecycle of information protection standards - set of stages which there passes the information protection standard from the moment of determination of requirement of development before its canceling;

the interested subjects - the state bodies, the companies, organizations and the organizations, military forming formed according to the laws of Ukraine which within competence apply information protection standards;

the customer - the interested subject for the benefit of whom information protection standards according to the order or on a contract basis are developed.

Other terms are used in the value given in the Laws of Ukraine "About the basic principles of ensuring cyber security of Ukraine", "About information protection in information communications systems", "About public service of special communication and information protection of Ukraine".

3. Subjects of standardization cryptographic and information technical protection, cyberprotection, counteractions to technical investigations are:

Administration of Gosspetssvyaz;

the body of standardization determined by Administration of Gosspetssvyaz cryptographic and information technical protection, cyberprotection, counteraction to technical investigations (further - body of standardization);

the interested subjects.

4. The property right to information protection standards and directories of such standards belongs to the state on behalf of body of standardization.

5. Administration of Gosspetssvyaz:

1) determines the priority directions of development in the field of standardization cryptographic and information technical protection, cyberprotection, counteraction to technical investigations;

2) approves proposals of the interested subjects to the work program on standardization cryptographic and information technical protection, cyberprotection, counteraction to technical investigations (further - the program);

3) is customer of standardization efforts cryptographic and information technical protection, cyberprotection, counteraction to technical investigations;

4) control of implementation of actions for standardization cryptographic and information technical protection carries out, cyberprotection, counteractions to technical investigations;

5) is determined by procedure for forming of the program;

6) determines form of the specification on project development of information protection standard;

7) determines form of the explanatory note to the draft standard of information protection;

8) determines form of response of the interested subject to the draft standard of information protection;

9) is determined by procedure for engineering inspection of the draft standard of information protection;

10) is determined by procedure for test and review of information protection standards;

11) is determined by procedure for mailing of information protection standards with limited access;

12) is determined by procedure for maintaining the directory of information protection standards;

13) performs other powers determined by the legislation.

6. Body of standardization:

1) performs development, acceptance, modification, canceling, action renewal, promulgation of information protection standards;

Creates 2) and approves the program;

3) accepts in coordination with Administration of Gosspetssvyaz and without inclusion in the program and approvals of the interested subjects information protection standards which establish general requirements to project development of information protection standards, their form, structure and technical and legal features of their development;

4) carries out engineering inspection of cases of information protection standards;

Develops 5), constitutes and keeps the directory of information protection standards;

6) extends information protection standards;

7) is conducted by fund of information protection standards;

8) performs other powers determined by the legislation.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info