THE ORDER OF THE DEPUTY PRIME MINISTER - THE MINISTER OF THE ARTIFICIAL INTELLIGENCE AND DIGITAL DEVELOPMENT OF THE REPUBLIC OF KAZAKHSTAN

of July 3, 2026 No. 380/Tax Code

About introduction of amendments to the order of the Minister of the defense and aerospace industry of the Republic of Kazakhstan of June 27, 2018 No. 105/Tax Code "About Approval of Profiles of Protection and Technique of Development of Profiles of Protection"

I ORDER:

1. Bring in the order of the Minister of the defense and aerospace industry of the Republic of Kazakhstan of June 27, 2018 No. 105/Tax Code "About Approval of Profiles of Protection and Technique of Development of Profiles of Protection" (it is registered in the Register of state registration of regulatory legal acts at No. 17247) the following changes:

state preamble in the following edition:

"According to the subitem 20) of article 7-1 of the Law of the Republic of Kazakhstan "About cyber security" I ORDER:"

1) of Item 1 to state the subitem in the following edition:

"1) protection Profiles according to appendix 1 to this order;";

appendix 1, approved by the specified order to be reworded as follows according to appendix 1 to this order;

appendix 2, approved by the specified order to be reworded as follows according to appendix 2 to this order.

2. To provide to committee on information security of the Ministry of artificial intelligence and digital development of the Republic of Kazakhstan in the procedure established by the legislation of the Republic of Kazakhstan:

1) state registration of this order in the Ministry of Justice of the Republic of Kazakhstan;

2) placement of this order on Internet resource of the Ministry of artificial intelligence and digital development of the Republic of Kazakhstan after its official publication;

3) within ten working days after state registration of this order in the Ministry of Justice of the Republic of Kazakhstan submission to Legal department of the Ministry of artificial intelligence and digital development of the Republic of Kazakhstan of data on execution of the actions provided by subitems 1) and 2) of this Item.

3. To impose control of execution of this order on the supervising vice-minister of artificial intelligence and digital development of the Republic of Kazakhstan.

4. This order becomes effective since July 12, 2026 and is subject to official publication.

Appendix 1

to the Order of the Deputy prime minister - the Minister of artificial intelligence and digital development of the Republic of Kazakhstan of July 3, 2026 No. 380/Tax Code

Appendix 1

to the Order of the Minister of the defense and aerospace industry of the Republic of Kazakhstan of June 27, 2018 No. 105/Tax Code

Protection profiles

Section 1. Profile of protection of means of anti-virus protection for workstations and servers

Chapter 1. General provisions

1. These Profiles of protection are developed according to the subitem 20) of article 7-1 of the Law of the Republic of Kazakhstan "About cyber security".

2. In these profiles of protection the following concepts are used:

1) assessment object (further - OO) - the OTsI components which are subject to assessment with managements of the administrator and user;

2) invasion (attack) - action which purpose is implementation of unauthorized access to digital resources;

3) the system of detection of invasions (further - OWLS) - program or the program technical tool, the implementing functions of the automated detection (blocking) of the actions in digital system directed to deliberate information access, special impacts on information (data carriers) for the purpose of its getting, destruction, misstatement and blocking of access to it;

4) the OWLS administrator - responsible for installation, administration and operation of OO;

5) OWLS analyzer - program or the OWLS program and technical component intended for information collection from sensors (sensors) of OWLS, its final analysis regarding detection of invasion (attack) to controlled OTsI;

6) data OWLS - the data collected or created OWLS as a result of accomplishment of the functions;

7) the sensor (sensor) of OWLS - program or the OWLS program and technical component intended for collection and primary analysis of information (data) on events in controlled OTsI and also - transfers of this information (data) to OWLS analyzer;

8) security policy of OO - set of the rules regulating asset management, their protection and distribution within OTsI;

9) functions of safety of OO - set of all functions of safety of OO directed to implementation of security policy of object of assessment (further - PBO);

10) anti-virus protection - information security and the OTsI components from malicious computer applications (viruses) (detection, blocking, isolation, removal of malicious computer applications);

11) means of anti-virus protection (further - SAVZ) - the software realizing functions of detection of computer programs or other computer information intended for unauthorized destruction, blocking, modification, copying of computer information or neutralization of means of information protection, and also response to detection of these programs and information;

12) the database of signs of malicious computer applications (viruses) (further - DB of the Communist Refoundation Party) - the SAVZ component containing information on malicious computer applications (viruses) (signature), used by SAVZ for detection of malicious computer applications (viruses) and their processing;

13) cyber security threat (further - threat) - set of the conditions and factors creating premises to emergence of incident of cyber security;

14) the administrator of safety - responsible for installation, administration and operation of OO;

15) trust to safety - the basis for confidence that the OTsI components answer the purposes of safety;

16) the safety purpose - intention to resist to the established threats and (or) to satisfy to established policy of safety of the organization and assumptions.

17) safety function - the functionality of part or parts of OTsI providing accomplishment of subset of the interconnected rules security policy of OO;

18) protection profile (further - PZ) - the list of the minimum requirements to safety of the program and technical means which are components of digital objects;

19) signature - the characteristic signs of computer malicious application (virus) (further - KV) used for its detection.

20) security policy of the organization - one or several rules, procedures, practical acceptances or the guidelines in the field of safety by which the organization in the activities is guided;

21) objects of digital infrastructure (further - OTsI) - set of the material, technical and technological means providing placement and the circle of functioning of digital objects;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info