Про основні засади заб... | on October 5, 2017 № 2163-VIII (Print version) 24/09/2022, 01:03 1) Article 7 of the Law of Ukraine “On the National Bank of Ukraine” (The Official Bulletin of the Verkhovna Rada of Ukraine, 1999, No. 29, Article 38 as amended) shall be supplemented with clause 32 and 33 to read as follows: “32) determines the procedures, requirements and measures for cyber defence and information security in the banking system of Ukraine and for the subjects of funds transfer, and monitors their implementation; establishes the Cyber Defence Centre of the National Bank of Ukraine and ensures the functioning of the cyber defence system in the banking system of Ukraine; 33) ensures formation and maintenance of the list of critical infrastructure facilities, as well as the register of critical information infrastructure facilities in the banking system of Ukraine, determines the criteria and procedure for attributing facilities in the banking system of Ukraine to critical infrastructure facilities and critical information infrastructure facilities, ensures assessment of cyber defence and audit of information security in the banking system of Ukraine”; 2) in the Law of Ukraine “On Defence of Ukraine” (The Official Bulletin of the Verkhovna Rada of Ukraine, 2000, No. 49, Article 420; 2011, No. 4, Article 27; 2015, No. 16, Article 110; 2016, No. 33, Article 564): a) Article 3 after the nineteenth paragraph shall be supplemented by a new paragraph to read as follows: “implementation of cyber defence (active cyber defence) measures to protect state sovereignty and ensure its defence capability, prevent armed conflict and repulse armed aggression”. In this connection, the twentieth paragraph shall be regarded as the twenty-first paragraph; b) the second sentence, part two of Article 4 shall be supplemented with the words “including the conduct of special operations (intelligence, information and psychological, etc.) in cyberspace”; {Subclause 3, clause 2 of the section has been repealed under Law No. 912-IX of 17 September 2020} {Subclause 4, clause 2 of the section has been repealed under Law No. 2469-VIII of 21 June 2018} 5) paragraph 6, Article 3 of the Law of Ukraine “On the Foreign Intelligence Service of Ukraine” (The Official Bulletin of the Verkhovna Rada of Ukraine, 2006, No. 8, Article 94) after the words “to the national security of Ukraine” add the words “including in cyberspace”; 6) in the Law of Ukraine “On the State Service for Special Communication and Information Protection of Ukraine” (The Official Bulletin of the Verkhovna Rada of Ukraine, 2014, No. 25, Article 890, No. 29, Article 946): а) part one, Article 2 and paragraph 2, part one of Article 3 after the words “cryptographic and technical protection of information” add the word “cybersecurity”; b) in part one of Article 14: paragraph 39 after the words “ensuring the functioning” add the word “government”; add paragraphs 85–92 to read as follows: “85) formation and implementation of public policy on the protection in cyberspace of state information resources and information whose protection is required by law, cyber defence of critical information infrastructure, implementation of state control in these fields; 86) co-ordination of cyber defence activities of cybersecurity subjects; 87) ensuring the establishment and operation of the National Telecommunication Network; 88) implementation of an organisational and technical model for cyber defence, implementation of organisational and technical measures to prevent, detect and respond to cyber incidents and cyberattacks and eliminate their consequences; 89) informing about cyber threats and appropriate methods of protection against them; 90) ensuring the implementation of the information security audit system at critical infrastructure facilities, establishing requirements for information security auditors, their certification (recertification); 91) co-ordination, organisation and conducting of communication and technological systems of critical infrastructure facilities on vulnerability; 92) ensuring the functioning of the State Centre for Cyber Defence”. 3. Within three months after the enactment of this Law, the Cabinet of Ministers of Ukraine shall: ensure the adoption of regulatory acts required for the implementation of this Law; bring its regulatory acts in line with this Law; ensure that ministries and other central executive authorities review and cancel their regulatory acts contrary to this Law. https://zakon.rada.gov.ua/laws/show/en/2163-19/print Page 10 of 12