The Ministry of Defense has certified its information security management system for compliance with the ISO/IEC 27001:2022 standard. The Ministry of Defense noted that it was the first to implement such a system and expressed hope that other ministries will «very soon catch up» with this standard.
The Ministry of Defense has certified its information security management system for compliance with the ISO/IEC 27001:2022 standard. The Ministry of Defense noted that it was the first to implement such a system and expressed hope that other ministries will «very soon catch up» with this standard.
This is stated in the Ministry of Defense’s notification on compliance with the national standard DSTU ISO/IEC 27001:2023 (ISO/IEC 27001:2022). It notes that this is a «world-recognized standard for information and cybersecurity.»
It provides a framework for information security management systems (ISMS) to «ensure the ongoing confidentiality, integrity and availability of information, as well as compliance with legislation».
«The Ministry of Defense was the first among Ukrainian ministries to implement an information security system based on these standards. The preparation took two years, and the verification was carried out by external independent auditors and a well-known certification body,» the Ministry of Defense reported.
ISO/IEC 27001 enables the implementation of cybersecurity policies and security tools that allow for the control and minimization of current risks. Currently, the certificate covers IT departments and systems supported by the IT department of the Ministry of Defense. The agency plans to expand its scope to other departments and systems of the Ministry of Defense.
«A comprehensive approach to cyber resilience is possible only on the basis of leading international standards and best practices. This is important not only for our security, but also for the trust of partners. At a time when our cybersecurity legislation is being updated, the Ministry of Defense is taking the first steps. We hope that others will follow us very soon», — commented Kateryna Chernogorenko, Deputy Minister of Defense of Ukraine for Digitalization.
Last month, the head of the State Service for Special Communications, Oleksandr Potiy, spoke about the development of the cybersecurity system during the public-private partnership. According to him, the shortage of professional personnel dealing with information security and cyber defense in Ukraine, according to various estimates, may reach 100,000 people.
Earlier, dev.ua spoke with Dan Cimpean, Director General of the National Cybersecurity Directorate of Romania, about cooperation between European countries in cyberspace, the importance of rapid information exchange and countering cyber threats. The conversation took place on the sidelines of the Kyiv International Cybersecurity Forum.
