Today, March 27, the Rada adopted a bill on strengthening information protection and cyber protection of state information resources and critical information infrastructure facilities. We tell you what it provides.
Today, March 27, the Rada adopted a bill on strengthening information protection and cyber protection of state information resources and critical information infrastructure facilities. We tell you what it provides.
This was announced by People's Deputy and member of the Verkhovna Rada Committee on National Security, Defense and Intelligence Oleksandr Fedienko.
On March 12, parliamentarians failed to vote on draft law No. 11290 , which, in particular, provides for the creation and operation of a national system for responding to cyber incidents, attacks, and threats related to information, electronic communication, and information and communication systems.
This time, 240 people's deputies supported the bill in the second reading.
"Today a historic event took place. The Parliament adopted in the second reading #ZP11290. This is a Law that will form the principles of Cyber Protection of State Information Resources. In simple terms, this is everything that concerns digital networks, services provided by the state to citizens of Ukraine," Fedienko wrote on Telegram regarding the adoption of the law.
The law provides for the expansion of the powers of specialized structures with the involvement of specialists from the private sector and the implementation of a system for responding to cyberattacks in accordance with European cybersecurity standards.
It also establishes the need to create a professional network of cybersecurity specialists in all government institutions that process important data of Ukrainians.
In addition, according to the new law, a national system will be created to respond to cybersecurity incidents, cyberattacks and cyberthreats regarding information, electronic communication and information and communication systems that process state information resources or information with restricted access, the protection requirement of which is established by law, and critical information infrastructure facilities.
The functioning of such a system will be ensured by the State Service for Special Communications and Information Protection.
The national cyberattack response system will include: CERT-UA and sectoral and regional teams responding to cybersecurity incidents, cyberattacks, and cyberthreats created by state or local government bodies.
The law also standardizes methods of cryptographic information protection and introduces a system for assessing the state of cyber defense.
