ORDER OF THE GOVERNMENT OF THE REPUBLIC OF KAZAKHSTAN

of May 23, 2016 No. 298

About approval of Rules of carrying out certification of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security

According to the subitem 5) of article 6 of the Law of the Republic of Kazakhstan of November 24, 2015 "About informatization" the Government of the Republic of Kazakhstan DECIDES:

1. Approve the enclosed Rules of carrying out certification of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security.

2. Recognize invalid some decisions of the Government of the Republic of Kazakhstan according to appendix to this resolution.

3. This resolution becomes effective after ten calendar days after day of its first official publication.

Approved by the Order of the Government of the Republic of Kazakhstan of May 23, 2016 No. 298

Rules of carrying out certification of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security

1. General provisions

1. These rules of carrying out certification of information system, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security (further - Rules) are developed according to the subitem 5) of article 6 of the Law of the Republic of Kazakhstan of November 24, 2015 "About informatization" and determine procedure for carrying out certification of information systems, information communication framework of "the electronic government", Internet resource of state body on compliance to requirements of information security.

2. These rules do not extend to carrying out certification of the information systems in the protected execution carried to the state secrets.

3. The main determinations, terms and concepts used in Rules:

1) authorized body in the field of information security support (further - authorized body) - the central executive body performing management and cross-industry coordination in the field of information security support;

2) the public technical service - the republican state company on the right of economic maintaining created according to the decision of the Government of the Republic of Kazakhstan;

3) the applicant - the owner (owner) of object of certification or person authorized by it who submitted the application for carrying out certification of object of certification on compliance to requirements of information security;

4) information security in the field of informatization (further - information security) - condition of security of electronic information resources, information systems, information and communication infrastructure from external and internal threats;

5) information and communication infrastructure - set of the objects of information and communication infrastructure intended for ensuring functioning of the technological circle for the purpose of forming of electronic information resources and provision of access to them;

6) objects of certification - information system, information communication framework of "the electronic government", Internet resource;

7) the hardware and software - set of the software and the technical means jointly applied to the solution of tasks of certain type;

8) information system - organizationally the arranged set of the information and communication technologies, service personnel and technical documentation realizing certain technological actions by means of information exchange and intended for the solution of specific functional objectives;

9) information communication framework of "the electronic government" - the technological framework intended for realization of service model of informatization;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info