1. These rules of carrying out monitoring of information security support, protection and safe functioning of objects of informatization of "the electronic government" (further – Rules) are developed according to the subitem 32) of article 7 of the Law of the Republic of Kazakhstan of November 24, 2015 "About informatization" (further – the Law) and determine procedure for carrying out monitoring of information security support, protection and safe functioning of objects of informatization of "the electronic government".

2. Monitoring of information security support, protection and safe functioning of objects of informatization of "the electronic government" (further – Monitoring) is carried out by means of monitoring system of information security support of objects of informatization of "the electronic government" for the purpose of detection of vulnerabilities, events of information security, threats and incidents of information security of objects of informatization of "the electronic government" and response to them.

3. In these rules the following concepts and reducings are used:

1) the owner of objects of informatization (further – the owner) – subject to which the owner of objects of informatization granted rights of possession and uses of objects of informatization in the limits determined by the law or the agreement and procedure;

2) authorized body in the field of informatization (further – authorized body) – the central executive body performing management and cross-industry coordination in the field of informatization and "the electronic government";

3) event of information security – the condition of objects of informatization testimonial of possible violation of the existing security policy or about before unknown situation which can be related to safety of objects of informatization;

4) incident of information security (further – incident) – separately or serially arising failures in work of information and communication infrastructure or its separate objects creating threat to their proper functioning and (or) conditions for illegal obtaining, copying, distribution, modification, destruction or blocking of electronic information resources;

5) threat of information security (further – threat) – actions capable to make negative impact on confidentiality, integrity and availability of object of informatization;

6) instrumental inspection – complex of the actions directed to detection of vulnerabilities;

7) the Public technical service (further - GTS) – the republican state company on the right of economic maintaining created according to the decision of the Government of the Republic of Kazakhstan;

8) event - the identified condition of object of informatization;

9) the agent of system of collection of events (further – the agent) – the software established on the active server, network and (or) specialized hardware for collection of events;

10) vulnerability – the shortcoming of the software or information security product which use breaks operability of this software and (or) information security product or leads to unauthorized actions bypassing the established permissions in the software and (or) in information security product;

11) the user – the subject of informatization using objects of informatization for accomplishment of specific function and (or) task;

12) objects of informatization of "the electronic government" – the state electronic information resources, the software of state bodies and information and communication infrastructure of "the electronic government", including the non-state information systems integrated with information systems of state bodies or intended for forming of the state electronic information resources;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info