The Administration of the State Service for Special Communications and Information Protection of Ukraine (State Service for Special Communications and Information Protection) has approved the Procedure for Implementing Response Measures in a Crisis Situation in Cyberspace. The document regulates a unified algorithm of actions and coordination of state bodies during large-scale cyber incidents and threats.
The Administration of the State Service for Special Communications and Information Protection of Ukraine (State Service for Special Communications and Information Protection) has approved the Procedure for Implementing Response Measures in a Crisis Situation in Cyberspace. The document regulates a unified algorithm of actions and coordination of state bodies during large-scale cyber incidents and threats.
The approved Procedure defines a common mechanism for organizing a response to cyber crises: from operational data exchange within the country to interaction with international partners and the European Union, reports the National Security and Defense Council of Ukraine.
The main body that will organize and direct the response process will be the permanent Joint Group for Response to Cyber Incidents, Cyber Attacks, and Cyber Threats. It operates as part of the National Cybersecurity Coordination Center (NCCC), a working body of the National Security and Defense Council of Ukraine (NSDC).
The direct implementation of measures is entrusted to the involved bodies and organizations, which will act within their powers and in accordance with the National Response Plan.
The new document defines three main work standards for state and specialized structures:
Continuous information exchange: all participants are required to promptly transmit data to coordinate actions.
Coordinated public communications: messages to the public and media about cyberattacks and measures to eliminate them will be prepared according to clear rules defined by Cabinet Resolution No. 1533.
Clear division of functions: each structure performs its own tasks, and the Joint Group ensures interdepartmental coordination.
If a cyberattack or incident in Ukraine poses a threat to the functioning of digital systems of European Union member states, the rules oblige the Government Computer Emergency Response Team CERT-UA to immediately inform foreign and international organizations.
In addition, the Procedure provides for close cooperation with the Ministry of Foreign Affairs of Ukraine. The participants of the Joint Group will provide the Ministry of Foreign Affairs with technical details and characteristics of cyber incidents for effective coordination of actions with international partners and investigation of attacks at the international level.
