The State Service for Special Communications has approved new Requirements for entities assessing the state of cyber defense. The document establishes clear qualification and mandatory criteria for legal entities, sole proprietors, and individuals who conduct cybersecurity audits and verifications.
The State Service for Special Communications has approved new Requirements for entities assessing the state of cyber defense. The document establishes clear qualification and mandatory criteria for legal entities, sole proprietors, and individuals who conduct cybersecurity audits and verifications.
The corresponding order No. 534 of July 14, 2026 was registered with the Ministry of Justice of Ukraine on August 12, 2026 under No. 1134/46528. The document was developed in accordance with Government Resolution No. 1799 of December 31, 2025, the press service of the State Special Communications Service reports .
Availability of a confirmed level according to domestic professional standards or equivalent international certification in the field of information security.
Legal entities and sole proprietors must have at least one qualified specialist on staff. Only those employees who fully meet the established requirements may be involved in the direct conduct of the assessment.
For individuals and sole proprietors without employees, clear requirements have been established regarding citizenship, lack of criminal record, and absence of personal or state sanctions.
In the case of auditing systems that process information that constitutes a state secret, it is mandatory to have the appropriate access or special permission.
All auditors and companies that meet the approved criteria will be included in the official list of subjects for assessing the state of cyber defense, which is administered by the State Service for Special Communications.
The introduction of uniform standards is designed to unify approaches to inspecting infrastructure facilities, increase the professional level of auditors, and guarantee the reliability of cybersecurity assessment results.
