THE ORDER OF OPERATIONAL ANALYTICAL CENTER IN CASE OF THE PRESIDENT OF THE REPUBLIC OF BELARUS

of December 29, 2022 No. 210

About implementation of the Law of the Republic of Belarus of October 14, 2022 No. 213-Z "About licensing"

Based on the Law of the Republic of Belarus of October 14, 2022 "About licensing" I ORDER to No. 213-Z:

1. Determine:

the list of measuring instruments and control, technical, hardware-software and the software necessary for performance of works and (or) rendering the services constituting activities for technical and (or) cryptographic information security according to appendix 1;

form of data on the works performed for previous year and (or) the rendered services constituting activities for technical and (or) cryptographic information security according to appendix 2.

2. Create the commission on questions of licensing of activities for technical and (or) cryptographic information security.

The members, procedure for activities and power of the commission specified in part one of this Item are determined by local legal acts of Operational analytical center in case of the President of the Republic of Belarus.

3. Make changes to orders of Operational analytical center in case of the President of the Republic of Belarus according to appendix 3.

4. Declare invalid:

Item 1 and subitem 2.1 of Item 2 of the order of Operational analytical center in case of the President of the Republic of Belarus of October 9, 2019 No. 336 "About measures for implementation of the Presidential decree of the Republic of Belarus of September 2, 2019 No. 326";

the order of Operational analytical center in case of the President of the Republic of Belarus of January 18, 2021 No. 3 "About change of the order of Operational analytical center in case of the President of the Republic of Belarus of October 9, 2019 No. 336".

5. This order becomes effective since January 1, 2023.

 

Appendix 1

to the Order of Operational analytical center in case of the President of the Republic of Belarus of December 29, 2022 No. 210

The list of measuring instruments and control, technical, hardware-software and the software necessary for performance of works and (or) rendering the services constituting activities for technical and (or) cryptographic information security

1. For carrying out special researches of technical means:

	Name of measuring instruments and control, technical, hardware-software and software	Minimum admissible technical characteristics
1.1	Measuring receiver of the high-frequency range (selection voltmeter, range analyzer)	Range of frequencies: 9 kHz – 2000 MHz Bandwidth: 9 kHz, 120 kHz Calibration coefficient error no more than 2 dB
1.2	Antennas measuring high-frequency range (electric and magnetic)	Range of frequencies: 9 kHz – 2000 MHz (for measurement of electric field) 9 kHz – MHz 30,0 (for measurement of magnetic field) Calibration coefficient error no more than 2 dB
1.3	Measuring receiver of the low-frequency range (selection nanovoltmeter, range analyzer)	Range of frequencies: 175–5700 Hz Own noise in strip of 1 Hz no more than 10 нВ Entrance resistance is at least 1 kOhm Error of measurement of the operating value of signal no more than 5 percent
1.4	Antennas measuring low-frequency range (electric and magnetic)	Range of frequencies: 200–5700 Hz Calibration coefficient error no more than 2 dB
1.5	Screened acoustic radiator with source of test signal	Range of frequencies: 175–5700 Hz Level of sound pressure at distance of 1 m at least 90 dB Irregularity of the amplitude-frequency characteristic in octava strips of frequencies no more than +3 dB Range of adjustment of level of sound pressure: 65–100 dB
1.6	Audio-noise meter	Range of frequencies: 175–5700 Hz Limits of measurement of levels of signals: 25–120 dB The class of accuracy is not lower than the second according to GOST 17168-82
1.7	Measuring microphone	Range of frequencies: 175–5700 Hz Irregularity of the amplitude-frequency characteristic in octava strips of frequencies no more than +2 dB Dynamic range of measurement of sound pressure: 40–100 dB Error of measurement of sound pressure no more + dB 1,5
1.8	Slip ring	Range of frequencies: 175–5700 Hz Calibration coefficient error no more than 2 dB
1.9	Measuring instrument of wave resistance	Range of frequencies: 175–5700 Hz Range of measurements of resistance: 1 Ohm – 100 kOhm
1.10	Test programs for carrying out special researches of technical means	Shall provide forming of test modes of computer aids (in case of which there are collateral electromagnetic radiations of the maximum intensity) the following interfaces: VGA, DVI, HDMI, USB, SATA, Ethernet, PS/2

2. For designing, creation (including in case of selection of the specified list of works) systems of information security on the objects of informatization intended for work with use of the state secrets and (or) certification of the objects of informatization intended for work with use of the state secrets:

	Name of measuring instruments and control, technical, hardware-software and software	Minimum admissible technical characteristics
2.1	Measuring receiver of the high-frequency range (selection voltmeter, range analyzer)	Range of frequencies: 9 kHz – 2000 MHz Bandwidth: 9 kHz, 120 kHz Calibration coefficient error no more than 2 dB
2.2	Antennas measuring high-frequency range (electric and magnetic)	Range of frequencies: 9 kHz – 2000 MHz (for measurement of electric field) 9 kHz – MHz 30,0 (for measurement of magnetic field) Calibration coefficient error no more than 2 dB
2.3	Generator of signals of the high-frequency range	Range of frequencies: 9 kHz – 2000 MHz Signal type – harmonious Power level of output signal at least 18 dBmW
2.4	Slip ring (current pincers)	Range of frequencies: 0, 15–300 MHz Calibration coefficient error no more than 2 dB Change of coefficient of calibration from podmagnichivaniye working current no more than 1 dB When placing slip ring in homogeneous electric field intensity of 3 indications In oil of the measuring instrument to which it is connected shall not exceed lower limit of measurement
2.5	Equivalent of network or sampler of tension	Range of frequencies: 0, 15–1000 MHz Maximum current of at least 10 And Power failure of power supply at frequency of 50 Hz in case of the maximum working current no more than 5 V Calibration coefficient error no more than 2 dB
2.6	Acoustic radiator with source of test signal	Range of frequencies: 175–5700 Hz Level of sound pressure at distance of 1 m at least 90 dB Irregularity of the amplitude-frequency characteristic in octava strips of frequencies no more than +3 dB Range of adjustment of level of sound pressure: 65–100 dB
2.7	Audio-noise meter	Range of frequencies: 175–5700 Hz Limits of measurement of levels of signals: 25–120 dB The class of accuracy is not lower than the second according to GOST 17168-82
2.8	Measuring microphone	Range of frequencies: 175–5700 Hz Irregularity of the amplitude-frequency characteristic in octava strips of frequencies no more than +2 dB Dynamic range of measurement of sound pressure: 40–100 dB Error of measurement of sound pressure no more + dB 1,5
2.9	Vibration converter (accelerometer)	Range of frequencies: 175–5700 Hz Sensitivity to acceleration at least 5 mV · c2/m

3. For designing, creation, certification (including in case of selection of the specified list of works) systems of information security of the information systems intended for information processing, distribution and (or) provision of which is limited, not carried to the state secrets:

	Name of measuring instruments and control, technical, hardware-software and software	Requirements to measuring instruments and control, technical, hardware-software and to software
3.1	Control facility of efficiency of security of information	Ensuring check of network infrastructure, operating systems and application software
3.2	System of collection and data processing of events of information security	Ensuring processing at least 100 events a second
3.3	Sensor of invasions	Means shall realize the following technologies for detection of invasions: network, wireless, analysis of behavior of network, protection of node
3.4	Generator of network traffic	Ensuring generation of traffic at least 10 Gbit / with
3.5	Means of linear enciphering

4. For designing, creation, audit (including in case of selection of the specified list of works) information security systems of crucial objects of informatization:

	Name of measuring instruments and control, technical, hardware-software and software	Requirements to measuring instruments and control, technical, hardware-software and to software
4.1	Control facility of efficiency of security of information	Ensuring check of network infrastructure, operating systems and application software
4.2	System of collection and data processing of events of information security	Ensuring processing at least 100 events a second
4.3	Sensor of invasions	Means shall realize the following technologies for detection of invasions: network, wireless, analysis of behavior of network, protection of node
4.4	Generator of network traffic	Ensuring generation of traffic at least 10 Gbit / with
4.5	Means of linear enciphering
4.6	Sensor of invasions of automated process control systems	Ensuring check of network infrastructure, operating systems and application software

5. For identification of the special technical means intended for secret receipt of information:

	Name of measuring instruments and control, technical, hardware-software and software	Minimum admissible technical characteristics
5.1	Hardware and software system on the basis of the scanning receiver and (or) the analyzer of range with possibility of conducting the round-the-clock radio monitoring	Upper bound of the range of scanning at least 6500 MHz Speed of scanning is at least 1 GHz/sec. in case of bandwidth of the receiver no more than 100 kHz
5.2	Multi-function search printer	Range of frequencies: 30–6000 MHz (for electric field) KHz 0,5–100 (for magnetic field) Analysis of the infrared and visible range (770–1000 nanometers) The analysis of wire lines (100 kHz – 9 MHz)
5.3	Search devices on detection of the hidden video cameras	Detection of optical lens and detection of parasitic electromagnetic radiations from the working video cameras
5.4	Equipment of thermovision control	Resolution of the detector is at least 640 x 480 pixels Sensitivity (minimum differentiated difference of temperatures) is not worse than °C 0,06
5.5	Set of customs mirrors	Length of bar of customs mirrors is at least m 1,5
5.6	Video endoscope	Diameter of the probe is no more than 8 mm Working length of the probe is at least 1 m
5.7	Nonlinear locator	Simultaneous acceptance and control (analysis) of the second and third harmonic

6. For the certificate of form of external submission of the electronic paper document availability of the means of verification of the digital signature having the certificate of conformity of National system of confirmation of conformity of the Republic of Belarus to requirements of the technical regulation of the Republic of Belarus "Information technologies shall be provided. Means of information protection. Information security" (TP 2013/027/BY), No. 375 approved by the resolution of Council of Ministers of the Republic of Belarus of May 15, 2013.

7. For distribution of open keys of verification of the digital signature availability shall be provided:

the means of development and verification of the digital signature having the certificate of conformity of National system of confirmation of conformity of the Republic of Belarus to requirements of the technical regulation of the Republic of Belarus "Information technologies. Means of information protection. Information security" (TP 2013/027/BY);

the system of the information security created and certified for the corresponding class of standard information systems according to the procedure, established by the legislation.

8. The software (operating systems, packets of application and specialized programs and another), necessary for performance of works and (or) rendering the services provided in Items 1-7 of this list and also for development, production (including in case of selection of the specified list of works) technical means of information processing in the protected execution, technical, program, software and hardware of information security and control of its security, means of cryptographic information security (including in case of selection of the specified list of means), shall be used by the license applicant (licensee) based on the corresponding license agreement.

 

Appendix 2

to the Order of Operational analytical center in case of the President of the Republic of Belarus of December 29, 2022 No. 210

Form

Data on the works performed for ______ year and (or) the rendered services constituting activities for technical and (or) cryptographic information security

1. Information about the licensee:

1.1. ____________________________________________________________________;

(full name of the licensee)

1.2. ____________________________________________________________________;

(abbreviated name of the licensee)

1.3. ____________________________________________________________________

(registration number in the Single state register

____________________________________________________________________________;

legal entities and individual entrepreneurs or accounting number of the payer)

1.4. ____________________________________________________________________;

(surname, own name, middle name (if that is available) the head of the licensee)

1.5. ____________________________________________________________________;

(location)

1.6. ____________________________________________________________________

(other contact information: the postal address (if differs from the place

____________________________________________________________________________;

stays), phone numbers, fax, e-mail address, another)

1.7. ____________________________________________________________________

(surname, own name, middle name (if that is available), the worker's position,

____________________________________________________________________________.

the licensed type of activity appointed responsible for implementation)

2. Data on the performed works and (or) the rendered services constituting the licensed type of activity:

Customer (consumer) of works and (or) services	Date and agreement number	The name of the performed works and (or) the rendered services constituting the licensed type of activity	Data (date and number of the letter) on approval of Operational analytical center in case of the President of the Republic of Belarus of performance of works and (or) rendering services (if the customer (consumer) is state body or the state organization)

3. The information about workers which performs the licensed type of activity:

Surname, own name, middle name (if that is available), identification number (in the presence)	Post on the state, the main work or combining jobs	Data on education in the field of information security, about retraining or advanced training concerning technical and cryptographic information security (the name of organization of education or other organization, details (number, date of issue) of the document on the higher education either the highest, or average special, either vocational training and retraining or advanced training)

4. Data on availability on the property right or other legal cause of measuring instruments and control, technical, hardware-software and the software necessary for performance of works and (or) rendering the services constituting the licensed type of activity (according to the list determined by Operational analytical center in case of the President of the Republic of Belarus):

Name	Brand, model (version), accession (serial) number (in case of their availability)	The ownership basis according to the legislation (the property right, economic maintaining, operational management, lease, free use or another)	Data on implementation of metrological assessment (date, the place) concerning the measuring instruments necessary for performance of works and (or) rendering services

5. Data on availability on the property right or other legal cause of the rooms necessary for performance of works and (or) rendering the services constituting the licensed type of activity:

Location (address) of the room	The ownership basis according to the legislation (the property right, economic maintaining, operational management, lease, free use or another)	Purpose of the room

6. Data on information system of the licensee intended for processing of office information of limited distribution (in the presence in licenses of works on designing, creation, certification of systems of information security of the information systems intended for information processing, distribution and (or) provision of which it is limited, not carried to the state secrets):

_____________________________________________________________________________

(details of the certificate of compliance of system of information security

____________________________________________________________________________.

information system to requirements for information security)

7. In the presence in the license of works on designing, creation, audit of information security systems of crucial objects of informatization are specified:

7.1. data on information system of the licensee intended for processing of office information of limited distribution:

_____________________________________________________________________________

(details of the certificate of compliance of system of information security

____________________________________________________________________________;

information system to requirements for information security)

7.2. data on certification of system of management of information security of the licensee:

_____________________________________________________________________________

(details of the certificate of conformity of National system of confirmation of conformity

____________________________________________________________________________.

The Republic of Belarus on system of management of information security)

8. In the presence in the license of works on carrying out special researches of technical means, to identification of the special technical means intended for secret receipt of information, to designing, creation of systems of information security on objects of informatization, certification of the objects of informatization intended for work with use of the state secrets, the licensee confirms that:

has the operating authority with use of the state secrets, and also the objects (object) of informatization intended (intended) for the information processing containing the state secrets;

the head and other workers who directly perform the licensed type of activity have the corresponding admission to the state secrets.

The data containing in this report and documents attached to it * are authentic.

Director (head)	_____________	_________________________
	(signature)	(initials, surname)

______________________________

* The licensee has the right to attach supporting documents or their copies to these data.

 

Appendix 3

to the Order of Operational analytical center in case of the President of the Republic of Belarus of December 29, 2022 No. 210

The list of the changes made to orders of Operational analytical center in case of the President of the Republic of Belarus

1. In Regulations on the procedure for determination of authorized suppliers of Internet services approved by the order of Operational analytical center in case of the President of the Republic of Belarus of August 2, 2010 No. 60:

in item 4:

state part one in the following edition:

"4. The suppliers of Internet services who do not have the right to rendering Internet services to state bodies and the organizations for receipt of such right direct the application in any form signed by the head or his authorized deputy to OATs. Full name of the supplier of Internet services, registration number in the Single state register of legal entities and individual entrepreneurs or accounting number of the payer, the location are specified in the statement. In the statement of the supplier of Internet services rendering services in provision of Internet access data on availability of license for activities in the field of communication regarding the corresponding components this type of activity of services are specified.";

paragraphs two and third parts two to exclude;

the second Item 10 after words of "suppliers of Internet services" to add part with the words "also shall stop rendering Internet services to state bodies and organizations";

in appendix to this Provision:

to add subitem 1.3 of Item 1 after the words "or the highest" with words ", or average special,";

in subitem 3.1 of Item 3 of the word "3-fl and" shall be replaced with words "3-in, 3 specialist,".

2. In the Instruction about procedure for carrying out accreditation of service providers in the State management system open keys of verification of the digital signature of the Republic of Belarus and control of observance of conditions of the accreditation approved by the order of Operational analytical center in case of the President of the Republic of Belarus of November 29, 2013 No. 89:

in appendix 1 to this Instruction:

in Item 1:

the paragraph one to state in the following edition:

"1. Service providers in GOSSUOK shall have license for activities on technical and (or) cryptographic information security which constituting services are:";

in the paragraph the second to "certificate" and "distribution" to replace words respectively with the words "certificate" and "distribution";

in paragraph three to "distribution" to replace the word with the word "distribution";

to exclude from subitem 2.4 of Item 2 of the word "3 spinning tops and 3-fl";

in subitem 3.3 of Item 3:

exclude the words "3 spinning tops and 3-fl";

add the subitem with words ", taking into account requirements to the organization of interaction of information systems";

appendix 2 to this Instruction after the word of "applicant" to add with the words "registration number in the Single state register of legal entities and individual entrepreneurs or accounting number of the payer";

in appendix 3 to this Instruction:

from Item 1 of the word"," to exclude certificates on state registration in the Single state register of legal entities and individual entrepreneurs;

in paragraph five of Item 2 and the paragraph the seventh Item 3 of the word "either the highest or vocational training and retraining or advanced training in area" shall be replaced with words "in the field of information security either the highest, or average special, either vocational training and retraining or advanced training concerning technical and cryptographic".

3. In the order of Operational analytical center in case of the President of the Republic of Belarus of March 3, 2018 No. 22 "About approval of criteria for evaluation of risk degree for selection of the checked subjects when carrying out selective check of accomplishment by licensees of the legislation on licensing, licensed requirements and conditions of implementation of activities for technical and (or) cryptographic information security":

in the name and Item 1 of the word of "licensed requirements and conditions of implementation of activities for technical and (or) cryptographic information security" shall be replaced with words "including licensed requirements";

in criteria for evaluation of risk degree for selection of the checked subjects when carrying out selective check of accomplishment by licensees of the legislation on licensing, the licensed requirements and conditions of implementation of activities for technical and (or) cryptographic information security approved by this order:

in the name of the word of "licensed requirements and conditions of implementation of activities for technical and (or) cryptographic information security" shall be replaced with words "including licensed requirements";

in Item 1 of the word "licensed requirements and conditions of implementation of activities for technical and (or) cryptographic information security (further – criteria)" shall be replaced with words "including licensed requirements (further – criteria),";

in Item 2 of the word "The presidential decree of the Republic of Belarus of September 1, 2010 No. 450 "About licensing of separate types of activity" shall be replaced with words "The law of the Republic of Belarus of October 14, 2022 No. 213-Z "About licensing";

in Item 3 of the word of "licensed requirements and conditions" and "the special permission (license) for activities" to replace respectively with the words "including licensed requirements" and "license for activities";

in part one of Item 5 of the word "the subjects determined according to Item 13 of appendix 1 to the Regulations on licensing of separate types of activity approved by the Presidential decree of the Republic of Belarus of September 1, 2010 No. 450," to replace with the word "licensees";

in Item 6:

in the paragraph the second words of "licensed requirements and conditions" shall be replaced with words "including licensed requirements,";

word in paragraph three "licensed requirements and conditions (two facts within 12 months in a row or two facts within 36 months)" shall be replaced with words "including licensed requirements (two facts within 12 months in a row or two facts within 36 months),";

to be reworded as follows appendix to these criteria it (is applied).

4. In the order of Operational analytical center in case of the President of the Republic of Belarus of February 20, 2020 No. 66 "About measures for implementation of the Presidential decree of the Republic of Belarus of December 9, 2019 No. 449":

in Regulations on procedure for technical and cryptographic information security in the information systems intended for information processing, distribution and (or) provision of which is limited, approved by this order:

" (except for the term "personal data")" to exclude from paragraph one of Item 2 of the word;

in item 4 part one:

to add paragraph two after the words "or the highest" with words ", or average special,";

in paragraph three:

the words "special permissions (licenses) for activities" shall be replaced with words "licenses for activities";

after the word of "works" to add Item with the words "and (or) services";

in Regulations on procedure for certification of systems of information security of the information systems intended for information processing, distribution and (or) provision of which is limited, approved by this order:

" (except for the term "personal data")" to exclude from paragraph one of Item 2 of the word;

in part one of Item 3 of the word "special permissions (licenses) for activities" shall be replaced with words "licenses for activities";

in Regulations on the procedure for the technical and cryptographic information security processed on crucial objects of informatization, approved by this order:

the second offer of Item 6 after the words "or the highest" to add with words ", or average special,";

in Item 7:

the words "special permissions (licenses) for activities" shall be replaced with words "licenses for activities";

add Item with the words "and (or) services (further-the specialized organizations)";

the second Item 22 after the word "informatizations" to add part with the words "or specialized organization";

in paragraph three of Item 24 of the word of "the organization having special permission (license) for activities for technical and (or) cryptographic information security regarding the corresponding components this type of activity of works" shall be replaced with words "the specialized organization";

(except for the term "personal data")" to exclude from Item 2 of the Regulations on procedure for the submission to Operational analytical center in case of the President of the Republic of Belarus of data on events of information security, condition of technical and cryptographic information security approved by this order, words".

5. In the paragraph the second Item 1 of the order of Operational analytical center in case of the President of the Republic of Belarus of February 5, 2021 "About granting of power special permission (license)" to replace No. 22 with creation of protocols on administrative offenses, preparation of cases on administrative offenses for consideration of" the word "with the word "licenses".

 

Appendix

to criteria for evaluation of risk degree for selection of the checked subjects when carrying out selective check of accomplishment by licensees of the legislation on licensing, including licensed requirements
(in edition of the Order of Operational analytical center in case of the President of the Republic of Belarus of December 29, 2022 No. 210)

The table of assignment of points depending on the works and (or) services constituting the licensed type of activity

№ payment order	The number of points depending on the works and (or) services specified in the license	1	2	5	6	10	12	15
	The name of works and (or) services (the number of points on separate work types)
1	Development, production (or selection of the specified list of works) technical means of information processing in the protected execution, technical, program, software and hardware of information security and control of its security, means of cryptographic information security (or selection of the specified list of means) (each work specified in this Item (without binding to means) causes charge to the licensee of one point)		+
2	Carrying out special researches of technical means			+
3	Designing, creation (or selection of the specified list of works) systems of information security on the objects of informatization intended for work with use of the state secrets (each work specified in this Item causes charge to the licensee of five points)					+
4	Designing, creation, certification (or selection of the specified list of works) systems of information security of the information systems intended for information processing, distribution and (or) provision of which is limited, not carried to the state secrets (each work specified in this Item causes charge to the licensee of four points)						+
5	Certification of the objects of informatization intended for work with use of the state secrets				+
6	Designing, creation, audit (or selection of the specified list of works) information security systems of crucial objects of informatization (each work specified in this Item causes charge to the licensee of five points)							+
7	Identification of the special technical means intended for secret receipt of information			+
8	Certificate of form of external submission of the electronic paper document	+
9	Distribution of open keys of verification of the digital signature	+

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info