Про основні засади заб... | on October 5, 2017 № 2163-VIII (Print version) 24/09/2022, 01:03 international standards on cybersecurity and cyber defence; 14) training specialists at bachelor's and master's levels of education and qualification under the state order in the amount necessary to meet the needs of the public sector of the economy, as well as for non-budgetary funds, including for recurrent training and mandatory periodic certification (recertification) of personnel responsible for ensuring the cybersecurity of critical infrastructure facilities, taking into account international standards; 15) implementation of the organisational and technical model of the national cybersecurity system as a set of measures, forces and means of cyber defence aimed at a rapid (crisis) response to cyberattacks and cyber incidents, the introduction of countermeasures aimed at minimizing the vulnerability of communication systems; 16) establishment of requirements (rules, guidelines) for the safe use of the Internet and the provision of electronic services by government authorities; 17) public-private co-operation in preventing cyber threats to critical infrastructure facilities, responding to cyberattacks and cyber incidents, and dealing with their consequences, in particular, in crisis, state of emergency, martial law and special periods; 18) conducting periodic reviews of the national cybersecurity system, developing cybersecurity indicators; 19) strategic planning and software targeted support in the development of electronic communications, information technology, information protection and cyber defence; 20) development of international co-operation in the field of cybersecurity, support of international initiatives in the field of cybersecurity that meet the national interests of Ukraine, deepening co-operation of Ukraine with the European Union and NATO to strengthen Ukraine's capacity in the field of cybersecurity, participation in confidence-building measures in the use of cyberspace, conducted under the auspices of the Organisation for Security and Co-operation in Europe; 21) carrying out investigative, intelligence, counter-intelligence and other activities aimed at preventing, detecting, suppressing and solving criminal offences against the peace and security of mankind, committed using cyberspace, investigating, prosecuting, promptly responding to and countering cybercrime, intelligence-subversive, terrorist and other activities in cyberspace that are detrimental to Ukraine's interests, and the use of the Internet for military purposes; {Clause 21, part two of Article 8 as amended by Law No. 720-IX of 17 June 2020} 22) implementation of politico-military, military-technical and other activities to enhance the capabilities of the State Military Organisation, security and defence sector, using cyberspace, to create and develop forces, means and instruments of possible response to aggression in cyberspace, which can be used as a deterrent to military conflicts and threats using cyberspace; 23) restrictions on participation in information security and cybersecurity activities of any economic entities that are under the control of the state recognized by the Verkhovna Rada of Ukraine as the aggressor state, or states and individuals subject to special economic and other restrictive measures (sanctions) taken at the national or international level as a result of aggression against Ukraine, as well as limiting the use of products, technologies and services of such entities to ensure the technical and cryptographic protection of state information resources, and strengthening state control in this area; 24) development of a cybersecurity counter-intelligence system designed to prevent, timely detect and counteract external and internal threats to Ukraine's security using cyberspace; elimination of conditions contributing to them and the reasons for their occurrence; 25) conducting intelligence activities to identify and counteract threats to Ukraine's national security in cyberspace, identifying other events and circumstances related to cybersecurity. 4. The procedure of functioning of the National Telecommunication Network, criteria, rules and requirements for the provision of services, their tariffication for users of the budgetary sphere, reimbursement of state budget expenses for maintenance of the National Telecommunication Network shall be approved by the Cabinet of Ministers of Ukraine. 5. The implementation of the organisational and technical model of cybersecurity as a component of the national cybersecurity system is carried out by the State Centre for Cybersecurity, which ensures the creation and operation of the main components of the system of secure access to the Internet for government authorities, the system of anti-virus protection of national information resources, information security audits and cyber defence of critical information infrastructure facilities, the system for identifying vulnerabilities and responding to cyber incidents and cyberattacks against cyber defence facilities, the system for interaction of computer emergency response teams, and, in cooperation with other cybersecurity subjects, develops cyber threat response scenarios, measures to counter such threats, and cyber training programmes and methodologies. Article 9. Government Computer Emergency Response Team of Ukraine CERT-UA 1. The tasks of CERT-UA are: 1) accumulation and analysis of data on cyber incidents, maintenance of the state register of cyber https://zakon.rada.gov.ua/laws/show/en/2163-19/print Page 7 of 12

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents