RESOLUTION OF THE CABINET OF MINISTERS OF THE REPUBLIC OF UZBEKISTAN

of November 7, 2011 No. 296

About measures for implementation of the Resolution of the President of the Republic of Uzbekistan of July 8, 2011 No. PP-1572 "About additional measures for protection of national information resource"

For the purpose of ensuring implementation of the resolution of the President of the Republic of Uzbekistan of July 8, 2011 "About additional measures for protection of national information resource" the Cabinet of Ministers decides No. PP-1572:

1. Approve:

Regulations on approval procedure on work on certification of objects of informatization, according to appendix No. 1.

The list of the data carried to confidential information according to appendix No. 2.

2. Make changes and additions to some decisions of the Government of the Republic of Uzbekistan according to appendix No. 3.

3. To impose control of execution of this resolution on the deputy prime minister of the Republic of Uzbekistan A. N. Aripov.

Appendix № 1

to the Resolution of the Cabinet of Ministers of the Republic of Uzbekistan of November 7, 2011 No. 296

Regulations on approval procedure on work on certification of objects of informatization

I. General provisions

1. This Provision according to the resolution of the President of the Republic of Uzbekistan of July 8, 2011 No. PP-1572 "About additional measures for protection of national information resource" determines procedure for issue to the organizations of permission to the work right for certification of objects of informatization to compliance to requirements of information security (further - permission).

2. In this Provision the following basic concepts are used: object of informatization - information systems of different level and appointment, network of telecommunications, technical means of information processing, the room where are established and are operated these means, and also the certain rooms intended for negotiating, including confidential;

certification of objects of informatization - complex of the organizational and technical actions directed to determination of compliance of actual state of security of objects of informatization to requirements of state standards and regulatory legal acts in information security fields;

authorized body - Service of state security of the Republic of Uzbekistan;

body for certification - the organizations having permission of authorized body to carrying out certain work types on certification of objects of informatization.

3. Permission is issued by authorized body.

4. Issue of permission is performed on the basis of results of studying and assessment of opportunities of the organization which submitted the application for receipt of permission (further - the organization applicant), on compliance to qualifying standards.

5. Permission is the document certifying the right of the organization to carrying out certain work types for certification of objects of informatization (further - works on certification). In permission the term of its action, but is specified no more than 5 years.

6. Permission is issued if the organization applicant has:

in property, on the right of economic maintaining, operational management or on other legal cause the property and the equipment necessary for work on certification;

in staff of the specialists who had special training in information security field and information security from which separate category has the admission which is drawn up in the procedure established by the legislation to the state secrets;

the license granting the right to carrying out separate work types (in the presence);

necessary regulatory legal acts and other documents for carrying out certification of objects of informatization.

II. Procedure for issue and receipt of permission

7. For receipt of permission the organization applicant directs the application for issue of permission to authorized body in form according to appendix No. 1 to this Provision.

8. The reference containing is enclosed to the application:

the list and characteristics of objects of the organization applicant (the main buildings and constructions, test laboratories, anechoic cameras, technology sites, storages, etc.) with which use work on certification is planned;

information about structure and qualification of employees of the organization;

the list and characteristics of the available equipment, devices, the equipment with indication of year of release and availability of certificates of conformity;

the list and characteristics of the available measuring equipment with indication of year of release and passing of checking in the procedure established by the legislation;

data on availability of licensed software;

data on availability of security service in the organization applicant;

the list of the documents establishing general and special requirements on ensuring information security in the organization the applicant;

description of structure of the organization applicant;

the list of available state standards, regulatory legal acts and other documents on information security.

Copies are attached to the reference:

document on state registration of the organization applicant;

the documents confirming availability of the property and the equipment necessary for work on certification;

job descriptions of the workers involved or planned to attraction for performance of works on certification.

The authorized body independently gets permissions, necessary for issue, the documents and information which are available in other authorized bodies, in accordance with the established procedure by means of information exchange, including in electronic form, except for the documents and information provided by this Item.

9. The documents submitted by the organization applicant shall be drawn up according to the requirements established by the legislation.

10. The authorized body within 30 calendar days considers the application, the reference and the materials attached to it and sends to the organization applicant the notice in writing on acceptance it to further review with indication of the collection amount. In case of variation of the statement the notification with indication of the reasons of its variation goes.

11. The statement deviates from consideration:

in case of discrepancy of the submitted documents to requirements of Items 6, the 8 and 9 this provision;

if the declared activities do not correspond to the charter (provision) of the organization.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info