THE ORDER OF THE CHAIRMAN OF THE AGENCY OF THE REPUBLIC OF KAZAKHSTAN ON INFORMATIZATION AND COMMUNICATION

of March 23, 2005 No. 72-p

About approval of the Instruction for determination of features of the organization of activities of suppliers of information, credit bureaus and receivers of credit reports (except for subjects of credit stories) in the market of information services

For the purpose of realization of Item 3 of article 4 of the Law of the Republic of Kazakhstan "About credit bureaus and forming of credit stories in the Republic of Kazakhstan" PRIKAZYVAYU:

1. Approve the enclosed Instruction for determination of features of the organization of activities of suppliers of information, credit bureaus and receivers of credit reports (except for subjects of credit stories) in the market of information services.

2. To department of informatization and legal service of the Agency of the Republic of Kazakhstan on informatization and communication (further - the Agency) (Zhaylaubayeva A.) provide in accordance with the established procedure state registration of this order in the Ministry of Justice of the Republic of Kazakhstan.

3. To management of financial regulation of the Agency (Arpabayev B. K.) after state registration of this order, in accordance with the established procedure, to provide its official publication in mass media.

4. This order becomes effective from the date of official publication.

Approved by the order of the Chairman of the Agency of the Republic of Kazakhstan on informatization and communication of March 23, 2005 No. 72-p

The instruction for determination of features of the organization of activities of suppliers of information, credit bureaus and receivers of credit reports (except for subjects of credit stories) in the market of information services

This Instruction is developed according to the Laws of the Republic of Kazakhstan "About credit bureaus and forming of credit stories in the Republic of Kazakhstan" (further - the Law on credit bureaus), "About informatization", "About the electronic document and the digital signature" and determines features of the organization of activities of suppliers of information, credit bureaus and receivers of credit reports (except for subjects of credit stories) in the market of information services.

1. General provisions

1. In this Instruction the following concepts are used:

1) the administrator of safety of information systems - the employee of the organization providing functioning of system of electronic obtaining and (or) data transmission, implementation of measures for their protection, performing generation of the arriving and (or) transmitted data taking into account its functions and powers (further - the administrator);

2) authentication - confirmation of authenticity of the subject or access object by determination of compliance of the shown details of access available in system;

3) identification - process of assignment or determination of compliance of the access to system and (or) to resource of system of the identifier to the list of the identifiers which are available in system shown for obtaining;

4) information system of participants of system of forming and use of credit stories - set of the information technologies, information networks and means of their software and hardware intended for implementation of information by suppliers, credit bureaus, receivers of credit reports and subjects of credit stories of information processes (further - information system of forming and use of credit stories);

5) key information - cryptographic keys and keys of the digital signature;

6) the operator - the employee of credit bureau who is directly performing acceptance, collection, processing and information transfer with use of system of protection;

7) the organization - credit bureau, the supplier of information, the receiver of the credit report (except for subjects of credit stories) obliged to take part in information system of forming and use of credit stories according to this Instruction;

8) the responsible person - the employee of credit bureau providing functioning and control of means of information protection from unauthorized access;

9) the user - the credit bureau and other participants of information system of credit stories participating in exchange of electronic documents and which are agreement parties about provision of information and (or) receipt of credit reports;

10) the digital signature - set of electronic digital symbols created by means of the digital signature and confirming reliability of the electronic document, its accessory and invariance of content;

11) the electronic document - the document in which information is provided in electronic and digital form and is certified by means of the digital signature.

Suppliers of information and receivers of the credit report (except for the subject of credit history) provide the accomplishment of organizational, technological conditions and requirements of credit bureau following from the agreements on provision of information and the internal documents of credit bureau provided by the Law on credit bureaus signed with it.

2. Technical supply of activities of participants in system of forming of credit stories

3. The procedure for technical supply of organization activity in system of forming of credit stories is determined by the act of the participant in system of forming of credit stories (the order, the order) including:

1) appointment of employees to whom obligations of the responsible person, the administrator, the operator are assigned;

2) the list of the employees allowed to workplace of the user;

3) operating mode.

4. Key information is on the machine carrier. Machine carriers after completion of work are stored in the safes which are specially allocated for these purposes.

5. Storage and use of machine carriers with key information exclude possibility of unauthorized access to them.

6. It is not allowed to the staff of the organization:

1) to make unauthorized copies of carriers of key information;

To disclose 2) this concerning carriers of key information, procedure for their storage, and also to transfer carriers of key information to strangers;

3) to record foreign information with carriers of key information.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info