Про основні засади заб... | on October 5, 2017 № 2163-VIII (Print version) 24/09/2022, 01:03 1) accumulation and analysis of data on cyber incidents, maintenance of the state register of cyber incidents; 2) providing practical assistance to the owners of cyber defence facilities on the prevention, detection and elimination of the consequences of cyber incidents on these facilities; 3) organisation and holding of practical workshops on cyber defence for the subjects of the national cybersecurity system and owners of cybersecurity facilities; 4) preparing and posting on its official website recommendations on counteracting modern types of cyberattacks and cyber threats; 5) co-ordination with law enforcement agencies, ensuring they are informed on time about cyberattacks; 6) co-ordination with foreign and international organisations on cyber incident response, in particular, through participation in the Forum of Incident Response and Security Teams FIRST with annual membership fees; 7) co-ordination with Ukrainian computer emergency response teams, as well as other enterprises, institutions and organisations, regardless of their form of ownership, that carry out actions related to the security of cyberspace; 8) processing of information received from citizens on cyber incidents concerning cybersecurity objects; 9) assistance to government authorities, local governments, military formations formed under the law, enterprises, institutions and organisations regardless of their form of ownership, as well as citizens of Ukraine in addressing cyber defence and countering cyber threats. The State Service for Special Communication and Information Protection of Ukraine is responsible for the operation of CERT-UA, within the limits of its staffing and funding. Article 10. Public-private co-ordination in the field of cybersecurity 1. Public-private co-ordination in cybersecurity is carried out by: 1) establishing a system for the timely detection, prevention and neutralisation of cyber threats, including the involvement of volunteer organisations; 2) increasing digital literacy of citizens and a culture of safe behaviour in cyberspace, comprehensive knowledge, skills and abilities to support cybersecurity goals, government and public projects to raise public awareness of cyber threats and cyber defence; 3) exchange of information between government authorities, the private sector and citizens on cyber threats to critical infrastructure facilities, other cyber threats, cyberattacks and cyber incidents; 4) partnerships and co-ordination of computer emergency response teams; 5) involvement of expert potential, scientific institutions, professional associations and public organisations in the preparation of key industry projects and regulations in the field of cybersecurity; 6) providing advisory and practical assistance in responding to cyberattacks; 7) formation of initiatives and establishing authoritative advice points for citizens, industry and business to ensure safety on the Internet; 8) implementing of a mechanism of public control over the effectiveness of cybersecurity measures; 9) holding a national summit periodically with professional business service providers, including insurers, auditors, lawyers, to determine their role in promoting better risk management in the field of cybersecurity; 10) creation of a system of training and increasing the competence of specialists in various fields of activity on cybersecurity; 11) close co-operation with individuals, public and volunteer organisations, IT companies in order to implement cyber defence measures in cyberspace. 2. Public-private co-ordination in the field of cybersecurity is applied taking into account the peculiarities of the legal regime established by law for certain objects and certain types of activity. Article 11. Assistance to the subjects of cybersecurity of Ukraine Government authorities and local governments, their officials, enterprises, institutions and organisations, regardless of their form of ownership, persons, citizens and citizen associations are obliged to assist cybersecurity subjects, report data is known to them regarding national security threats using cyberspace or any other cyber threats to cybersecurity objects, cyberattacks and/or circumstances, information about which may contribute to preventing, detecting and deterring such threats, countering cybercrime, cyberattacks and minimising their consequences. Article 12. Liability for breach of cybersecurity legislation Persons guilty of breach of legislation in the fields of national security, electronic communications and information protection, if cyberspace is the place and/or method of committing a criminal offence, https://zakon.rada.gov.ua/laws/show/en/2163-19/print Page 8 of 12

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents