Про основні засади заб... | on October 5, 2017 № 2163-VIII (Print version)
24/09/2022, 01:03
international standards on cybersecurity and cyber defence;
14) training specialists at bachelor's and master's levels of education and qualification under the
state order in the amount necessary to meet the needs of the public sector of the economy, as well as
for non-budgetary funds, including for recurrent training and mandatory periodic certification
(recertification) of personnel responsible for ensuring the cybersecurity of critical infrastructure
facilities, taking into account international standards;
15) implementation of the organisational and technical model of the national cybersecurity system
as a set of measures, forces and means of cyber defence aimed at a rapid (crisis) response to
cyberattacks and cyber incidents, the introduction of countermeasures aimed at minimizing the
vulnerability of communication systems;
16) establishment of requirements (rules, guidelines) for the safe use of the Internet and the
provision of electronic services by government authorities;
17) public-private co-operation in preventing cyber threats to critical infrastructure facilities,
responding to cyberattacks and cyber incidents, and dealing with their consequences, in particular, in
crisis, state of emergency, martial law and special periods;
18) conducting periodic reviews of the national cybersecurity system, developing cybersecurity
indicators;
19) strategic planning and software targeted support in the development of electronic
communications, information technology, information protection and cyber defence;
20) development of international co-operation in the field of cybersecurity, support of
international initiatives in the field of cybersecurity that meet the national interests of Ukraine,
deepening co-operation of Ukraine with the European Union and NATO to strengthen Ukraine's
capacity in the field of cybersecurity, participation in confidence-building measures in the use of
cyberspace, conducted under the auspices of the Organisation for Security and Co-operation in
Europe;
21) carrying out investigative, intelligence, counter-intelligence and other activities aimed at
preventing, detecting, suppressing and solving criminal offences against the peace and security of
mankind, committed using cyberspace, investigating, prosecuting, promptly responding to and
countering cybercrime, intelligence-subversive, terrorist and other activities in cyberspace that are
detrimental to Ukraine's interests, and the use of the Internet for military purposes;
{Clause 21, part two of Article 8 as amended by Law No. 720-IX of 17 June 2020}
22) implementation of politico-military, military-technical and other activities to enhance the
capabilities of the State Military Organisation, security and defence sector, using cyberspace, to create
and develop forces, means and instruments of possible response to aggression in cyberspace, which
can be used as a deterrent to military conflicts and threats using cyberspace;
23) restrictions on participation in information security and cybersecurity activities of any
economic entities that are under the control of the state recognized by the Verkhovna Rada of Ukraine
as the aggressor state, or states and individuals subject to special economic and other restrictive
measures (sanctions) taken at the national or international level as a result of aggression against
Ukraine, as well as limiting the use of products, technologies and services of such entities to ensure the
technical and cryptographic protection of state information resources, and strengthening state control
in this area;
24) development of a cybersecurity counter-intelligence system designed to prevent, timely detect
and counteract external and internal threats to Ukraine's security using cyberspace; elimination of
conditions contributing to them and the reasons for their occurrence;
25) conducting intelligence activities to identify and counteract threats to Ukraine's national
security in cyberspace, identifying other events and circumstances related to cybersecurity.
4. The procedure of functioning of the National Telecommunication Network, criteria, rules and
requirements for the provision of services, their tariffication for users of the budgetary sphere,
reimbursement of state budget expenses for maintenance of the National Telecommunication Network
shall be approved by the Cabinet of Ministers of Ukraine.
5. The implementation of the organisational and technical model of cybersecurity as a component
of the national cybersecurity system is carried out by the State Centre for Cybersecurity, which ensures
the creation and operation of the main components of the system of secure access to the Internet for
government authorities, the system of anti-virus protection of national information resources,
information security audits and cyber defence of critical information infrastructure facilities, the
system for identifying vulnerabilities and responding to cyber incidents and cyberattacks against cyber
defence facilities, the system for interaction of computer emergency response teams, and, in cooperation with other cybersecurity subjects, develops cyber threat response scenarios, measures to
counter such threats, and cyber training programmes and methodologies.
Article 9. Government Computer Emergency Response Team of Ukraine CERT-UA
1. The tasks of CERT-UA are:
1) accumulation and analysis of data on cyber incidents, maintenance of the state register of cyber
https://zakon.rada.gov.ua/laws/show/en/2163-19/print
Page 7 of 12
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents