European Parliament and of the Council on Electronic Commerce, laying down the common legal framework of electronic commerce for all Member States, was transposed. Provisions and directives on electronic commerce are largely vague, therefore additional legislation is required. For this purpose, the Economic Commission for Europe - United Nations Centre for Trade Facilitation and Electronic Business (UN/CEFACT) officially published Recommendation No. 33 in July 2005 in Geneva introducing a simple, transparent and effective processes for global commerce. Processes and services are governed by Directive No 2006/123/EC of the European Parliament and of the Council on services in the internal market; all Member States are obliged to put in force laws, other regulations and administrative measures necessary in order to ensure compliance with that directive. The respective measure requires that the directive be transposed into our legal system by the end of 2009. Computer crime (Ministry of Justice, Ministry of the Interior) – this area is covered by the existing legislation as well. The Slovak Republic ratified the Convention on Cybercrime CETS 185/2001 issued by the Council of Europe; its principles were incorporated into the Penal Code4. Copyright (Ministry of Culture) and related rights are governed by the Copyright Act5. Norms and standards6. International standardisation organisations (ISO, IEC, CEN) publish also norms stipulating security requirements with respect to information and communication systems. Competences for the publication of these norms are divided among several institutions in Slovakia. Generally applicable norms are published by the SOSMT (Slovak Standards Institute - SUTN), standards pertaining to classified information and electronic signature are defined by the NSA, and standards for public administration information systems are published by the MF SR. Standards published by other central government authorities may also include some security aspects, e.g. standards issued by the Ministry of Health pertaining to the medical records. Coordination of standards publishment area in between individual institutions is ensured through involvement of their employees in relevant committees of the MF SR and the SOSMT; however, standardization of information security is not coordinated at the institutional level. International cooperation in information security is necessary in order to ensure compatibility of solutions and sufficient level of protection of the global ICI. International cooperation is equally necessary due to the complexity of the area of information security as such, resulting in a situation where majority of countries do not have sufficient capacities to build the necessary know-how individually, and development and implementation of necessary solutions may take undesirably long even for the most advanced countries. Slovakia is engaged in international cooperation efforts in information security; Slovakia is represented in the ENISA, EU working groups (OECD working group for information security; working groups for certification of means and accreditation of systems and networks for secure data transfer in EU electronic and communication systems, etc.), NATO working groups, FESA; Slovakia has also access to ISO information security standards under preparation. Individuals and non-state organisations are represented in other international organisations (IFIP TC11, etc.) as well. Using an ISO terminology, Slovakia is Act No. 300/2005 Coll., the Penal Code, § 247 Damage and misuse of a record on information media Act No. 618/2003 Coll. on Copyright and Related Rights as amended 6 In the international context, the term standard means a norm; in Slovakia, the term norm describes a standardisation document issued by SUTN and a standard is a standardisation document issued by central government bodies 4 5 7