RESOLUTION OF COUNCIL OF MINISTERS OF THE REPUBLIC OF BELARUS

of May 26, 2009 No. 675

About some questions of information security

According to article 28 of the Law of the Republic of Belarus of November 10, 2008 "About information, informatization and information security" the Council of Ministers of the Republic of Belarus DECIDES:

1. Approve enclosed:

The regulations on procedure for information security in the state information systems, and also the information systems containing information, distribution and (or) provision of which are limited;

Regulations on procedure for certification of systems of information security;

Regulations on procedure for conducting state examination of means of information protection.

2. This resolution becomes effective since May 27, 2009.

Approved by the Resolution of Council of Ministers of the Republic of Belarus of May 26, 2009 No. 675

The regulations on procedure for information security in the state information systems, and also the information systems containing information, distribution and (or) provision of which are limited

Chapter 1. General provisions

1. This Provision is developed according to the Law of the Republic of Belarus of November 10, 2008 "About information, informatization and information security" (The national register of legal acts of the Republic of Belarus, 2008, No. 279, 2/1552) (further - the Law) and determines procedure for information security in the state information systems, and also the information systems containing information, distribution and (or) provision of which is limited (further information systems).

2. For the purposes of this provision terms and their determinations in the values established by the Law are applied.

3. For information security in information systems the system of information security including complex of the organizational and technical measures aimed at providing confidentiality, integrity and availability of information is created.

4. During creation of systems of information security of information systems the means of information protection having the certificate of conformity issued in National system of confirmation of conformity of the Republic of Belarus or the positive expert opinion by results of state examination shall be applied.

5. In case of interaction between the information systems processing information, distribution and (or) provision of which is limited, the means of information protection having the certificate of conformity issued in National system of confirmation of conformity of the Republic of Belarus or the positive expert opinion by results of state examination shall be applied.

6. Connection of the information systems processing information distribution and (or) provision of which is limited, to networks public, including to the global Internet, it is forbidden.

7. In case of connection of information systems in which public information is processed the means of information protection having the certificate of conformity issued in National system of confirmation of conformity of the Republic of Belarus or the positive expert opinion by results of state examination shall be applied to networks public, including to the global Internet.

8. Responsibility for the organization of works on information security is conferred on heads of the organizations who own and (or) use information resources of information system.

9. Creation and operation of system of information security in information systems are performed by division of technical information security or the designated officials responsible for realization of technical measures for information security at the owner (owner) of information system.

Owners (owners) of information systems can involve the organizations having the corresponding special permissions (licenses) of Operational analytical center in case of the President of the Republic of Belarus in works on creation of systems of information security (further - the specialized organizations).

Chapter 2. Creation of system of information security

10. The complex of actions for creation of system of information security in information systems includes:

classification of the data which are stored and processed in information system and separation of information on categories of access;

organizational structure analysis of information system, procedure for the organization of computation processes and conditions of its functioning;

assignment to information system of class of standard object of informatization according to requirements of technical regulatory legal acts in the field of information security;

development or adjustment of information security policy;

development or adjustment of task on safety for information system according to requirements of technical regulatory legal acts in the field of information security;

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info