Unofficial transfer (c) Soyuzpravoinform LLC

RESOLUTION OF THE CABINET OF MINISTERS OF UKRAINE

of March 24, 2023 No. 257

Some questions of carrying out substantive audit of information security on objects of critical infrastructure

According to part three of article 6 of the Law of Ukraine "About the basic principles of ensuring cyber security of Ukraine" the Cabinet of Ministers of Ukraine decides:

1. Approve the Procedure for carrying out substantive audit of information security on objects of the enclosed critical infrastructure.

2. To provide administrations of Public service of special communication and information security:

approval of requirements to auditors of information security on objects of critical infrastructure and to procedure for their certification (recertification);

carrying out the analysis of reports on results of substantive audit of information security on objects of critical infrastructure, provision of the summarized information on condition of information security on objects of critical infrastructure of the Office of the National Security and Defense Council of Ukraine and Cabinet of Ministers of Ukraine.

Approved by the Resolution of the Cabinet of Ministers of Ukraine of March 24, 2023, No. 257

Procedure for carrying out substantive audit of information security on objects of critical infrastructure

1. This Procedure determines the mechanism of the organization and carrying out substantive audit of information security on objects of critical infrastructure and the requirement to its carrying out.

The purpose of carrying out substantive audit of information security on objects of critical infrastructure is assessment by the auditor of information security of condition of information security on objects of critical infrastructure which shall conform to requirements of the legislation in spheres of cyber security and information security in information, electronic communication and information and communication systems.

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info