Про основні засади заб... | on October 5, 2017 № 2163-VIII (Print version)
24/09/2022, 01:03
1) accumulation and analysis of data on cyber incidents, maintenance of the state register of cyber
incidents;
2) providing practical assistance to the owners of cyber defence facilities on the prevention,
detection and elimination of the consequences of cyber incidents on these facilities;
3) organisation and holding of practical workshops on cyber defence for the subjects of the
national cybersecurity system and owners of cybersecurity facilities;
4) preparing and posting on its official website recommendations on counteracting modern types
of cyberattacks and cyber threats;
5) co-ordination with law enforcement agencies, ensuring they are informed on time about
cyberattacks;
6) co-ordination with foreign and international organisations on cyber incident response, in
particular, through participation in the Forum of Incident Response and Security Teams FIRST with
annual membership fees;
7) co-ordination with Ukrainian computer emergency response teams, as well as other enterprises,
institutions and organisations, regardless of their form of ownership, that carry out actions related to
the security of cyberspace;
8) processing of information received from citizens on cyber incidents concerning cybersecurity
objects;
9) assistance to government authorities, local governments, military formations formed under the
law, enterprises, institutions and organisations regardless of their form of ownership, as well as
citizens of Ukraine in addressing cyber defence and countering cyber threats.
The State Service for Special Communication and Information Protection of Ukraine is
responsible for the operation of CERT-UA, within the limits of its staffing and funding.
Article 10. Public-private co-ordination in the field of cybersecurity
1. Public-private co-ordination in cybersecurity is carried out by:
1) establishing a system for the timely detection, prevention and neutralisation of cyber threats,
including the involvement of volunteer organisations;
2) increasing digital literacy of citizens and a culture of safe behaviour in cyberspace,
comprehensive knowledge, skills and abilities to support cybersecurity goals, government and public
projects to raise public awareness of cyber threats and cyber defence;
3) exchange of information between government authorities, the private sector and citizens on
cyber threats to critical infrastructure facilities, other cyber threats, cyberattacks and cyber incidents;
4) partnerships and co-ordination of computer emergency response teams;
5) involvement of expert potential, scientific institutions, professional associations and public
organisations in the preparation of key industry projects and regulations in the field of cybersecurity;
6) providing advisory and practical assistance in responding to cyberattacks;
7) formation of initiatives and establishing authoritative advice points for citizens, industry and
business to ensure safety on the Internet;
8) implementing of a mechanism of public control over the effectiveness of cybersecurity
measures;
9) holding a national summit periodically with professional business service providers, including
insurers, auditors, lawyers, to determine their role in promoting better risk management in the field of
cybersecurity;
10) creation of a system of training and increasing the competence of specialists in various fields
of activity on cybersecurity;
11) close co-operation with individuals, public and volunteer organisations, IT companies in order
to implement cyber defence measures in cyberspace.
2. Public-private co-ordination in the field of cybersecurity is applied taking into account the
peculiarities of the legal regime established by law for certain objects and certain types of activity.
Article 11. Assistance to the subjects of cybersecurity of Ukraine
Government authorities and local governments, their officials, enterprises, institutions and
organisations, regardless of their form of ownership, persons, citizens and citizen associations are
obliged to assist cybersecurity subjects, report data is known to them regarding national security
threats using cyberspace or any other cyber threats to cybersecurity objects, cyberattacks and/or
circumstances, information about which may contribute to preventing, detecting and deterring such
threats, countering cybercrime, cyberattacks and minimising their consequences.
Article 12. Liability for breach of cybersecurity legislation
Persons guilty of breach of legislation in the fields of national security, electronic communications
and information protection, if cyberspace is the place and/or method of committing a criminal offence,
https://zakon.rada.gov.ua/laws/show/en/2163-19/print
Page 8 of 12
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents