Unofficial transfer (c) Soyuzpravoinform LLC

ORDER OF ADMINISTRATION OF PUBLIC SERVICE OF SPECIAL COMMUNICATION AND INFORMATION SECURITY OF UKRAINE

of June 4, 2026 No. 410

About approval of the Procedure for joining of subjects of ensuring cyber security to platform of exchange of information about cyberincidents, cyber attacks, cyberthreats

According to the paragraph the second parts two of article 9-1 of the Law of Ukraine "About the basic principles of ensuring cyber security of Ukraine", the paragraph the fourth Item 115 parts one of article 14 of the Law of Ukraine "About public service of special communication and information security of Ukraine", the paragraph the fourth subitem 95-44 of item 4 and Item 10 of the Regulations on Administration of Public service of special communication and information security of Ukraine approved by the resolution of the Cabinet of Ministers of Ukraine of September 03, 2014 No. 411, Item 15 of the National plan of the response to cyberincidents, cyber attacks, cyberthreats approved by the resolution of the Cabinet of Ministers of Ukraine of November 26, 2025 No. 1533,

I ORDER:

1. Approve the Procedure for joining of subjects of ensuring cyber security to platform of exchange of information about cyberincidents, cyber attacks, cyberthreats which is applied.

2. To provide to department of cyberprotection of Administration of Public service of special communication and information security of Ukraine in accordance with the established procedure submission of this order on state registration in the Ministry of Justice of Ukraine.

3. This order becomes effective from the date of its official publication.

It is approved: Chief of staff of the National Security and Defense Council of Ukraine

Anatoly Bargilevich

The chief of the General Staff of the Armed Forces of Ukraine - the lieutenant general

Andrey Ignatov

V.i.o. Heads of the Security Service of Ukraine

Eugeny Chmara

First Deputy Minister of Defence of Ukraine

Alexey Vyskub

Chairman of the National Bank of Ukraine

Andrey Pyshny

Head of National police of Ukraine

Ivan Vygovsky

Approved by the Order of Administration of Public service of special communication of information security of Ukraine of June 4, 2026, No. 410

Procedure for joining of subjects of ensuring cyber security to platform of exchange of information about cyberincidents, cyber attacks, cyberthreats

1. This Procedure determines the mechanism and conditions of joining of the main subjects of national system of cyber security, subjects of national response system, public authorities, state bodies, local government bodies, operators of critical infrastructure, owners or managers of objects of critical information infrastructure, other subjects of ensuring cyber security which according to the legislation are involved in accomplishment of tasks within functioning of national response system (further - subjects of ensuring cyber security), to platform of exchange of information about cyberincidents, cyber attacks, cyberthreats (further - the Platform).

2. In this Procedure it is necessary to understand the personal web page (web service or other program interface) of the user which underwent electronic identification and authentication and providing it the authorized access to functionality of the Platform as the term "electronic office of the user".

Other terms in this Procedure are used in the value given in the Laws of Ukraine "About information", "About the basic principles of ensuring cyber security of Ukraine", "About information security in information and communication systems", "About electronic identification and electronic confidential services", the National plan of response to cyberincidents, cyber attacks and cyberthreats approved by the resolution of the Cabinet of Ministers of Ukraine of November 26, 2025 No. 1533 (further - the National plan of reaction).

3. The platform represents the information system intended for centralized acceptance, processing and storage of messages on cyberincidents, cyber attacks, cyberthreats according to Item 15 of the National plan of reaction.

4. Subjects of the Platform are:

the owner - the state on behalf of Administration of Gosspetssvyaz;

the administrator - the State center of cyberprotection of Public service of special communication and information security of Ukraine;

users - the authorized persons of the subject of ensuring cyber security performing exchange of messages on cyberincidents, cyber attacks and cyberthreats through the Platform.

5. Administrator Platformy:

takes organizational measures and provides with necessary resources for the purpose of creation of conditions for stable functioning of the Platform;

provides functioning and the round-the-clock access to the Platform;

exercises technical administration, control and monitoring of condition of functioning of the Platform;

provides explanations concerning connection to the Platform;

provides administration of accounting records of users of the Platform, rendering the advisory help to them;

exercises control of observance of requirements of the legislation for information security and cyberprotection.

6. In case of temporary suspension of functioning of the Platform exchange of information about cyberincidents, cyber attacks, cyberthreats is performed by means of the mechanisms determined by the national plan of reaction.

7. For accession to the Platform the subject of ensuring cyber security with the official letter to Administration of Gosspetssvyaz submits the application in the form given in appendix to this Procedure.

8. The administrator within ten working days from the date of receipt of the request studies it, creates electronic office of the user and reports to the subject of ensuring cyber security about the decision on accession to the Platform in paper or electronically (with provision of the necessary data for access to the Platform on condition of fulfillment of requirements provided by Items 4, 7 presents About).

For creation and the description of electronic office of the user the administrator uses information specified in the request.

9. Electronic identification and authentication of users are performed through electronic office, in particular by means of the integrated system of electronic identification, by use by users of the qualified digital signature.

10. In case of identification by the administrator in the request of incomplete or unreliable information he within ten working days from the date of receipt of the request in writing notifies the subject of ensuring cyber security on refusal in creation of electronic office of the user with indication of the revealed shortcomings.

After remedial action the subject of ensuring cyber security submits the administrator the repeated application which is considered according to the procedure, determined by Items 8-10 of this Procedure.

11. Users within five working days from the date of change of information specified in the request make corresponding changes to the description of electronic office of the user.

12. The administrator within five working days from the date of modification of the description of electronic office of the user confirms such changes or rejects changes with indication of the revealed shortcomings if in changes incomplete or unreliable information is specified.

13. Users of the Platform shall:

observe requirements of this Procedure;

perform exchange of messages on cyberincidents, cyber attacks, cyberthreats according to the regulations established by the National plan of reaction;

use information from the Platform only for purpose.

14. Access for users to the Platform is subject to the termination or restriction in case:

dismissal of the user from position;

the termination of accomplishment by the user of the job responsibilities on temporary or permanent basis;

identification of the facts of use of the Platform and information from it not on purpose;

violation by the user of requirements of the legislation in spheres of homeland security, cyber security and information security.

The subject of ensuring cyber security shall instantly, but not later than within one working day in paper or electronically to notify the administrator Platforma on need of the termination or restriction of access to the user Platformy.

The administrator Platformy within one working day from the date of receipt of the relevant information or immediately in case of identification of the circumstances determined by paragraphs the fourth and fifth this Item provides the termination or restriction of access for the user to Platforma.

15. Need of use of the Platform does not exclude, and only supplements possibilities of provision of information on cyberincidents, cyber attacks, cyberthreats of other communication channels and/or interactions, in particular determined by the National plan of reaction.

16. Information processing in the Platform is carried out taking into account requirements of the legislation in spheres of information security and cyberprotection. Processing of personal data in the Platform, and also their storage are performed with observance of requirements of the Law of Ukraine "About personal data protection".

17. Information with limited access, including information which is the state secret, office information in the Platform are not processed and not stored.

Appendix

to the Procedure for joining of subjects of ensuring cyber security to platform of exchange of information about cyberincidents, cyber attacks, cyberthreats
(Item 7)

The request for accession to platform of exchange of information about cyber security incidents, cyber attacks, cyberthreats

See the Request for accession to platform of exchange of information about cyber security incidents, cyber attacks, cyberthreats (22Kb In original language)

 

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info