LEGAL BASIS OF ENSURING CYBER SECURITY OF UKRAINE: PROBLEMS AND WAYS OF ELIMINATING

Abstract

In the study we tested the analysis of modern data on cyber security in Ukraine, we highlighted the main aspects of the regulatory and legal support of the national information security. Identified key reported measures to counteract threats to state information security in the whole and in each individual types and the lack of practical implementation these activities. Found, that at the legislative level had been adopted only two documents on cyber security: Law of Ukraine on “Fundamentals of National Security of Ukraine”, and the Decree of the President of Ukraine № 47/2017 of February 25, 2017 about des approved the Doctrine of Information Security of Ukraine. In these documents cyber security is given priority in the security system. Determined the main problems of ensuring the cyber security: ineffective regulatory and legal support and system of governance; the lack unified strategy of cyber security; low level of government management in cyber defense; temporal inconsistence of state regulation in information area and development of a legal system for the regulation in protection of critical infrastructure seams; the lack of transactional approach to the state cyber security governance by the state part; no requirement for security system(SIS); employment outdated standards. Offered the replacement of technical security information documents (TS ID), more effective and modern basic standards, establish industry standards for information security system (ISS). Amend the Law of Ukraine “Information security and telecommunication system” and provide a new approach of the method for confirming compliance of information system of information security requirements by establishing criteria for compliance; conduct regular audits to ensure compliance with the requirements and proper functioning of the security management process; conduct proven system of security information.

For further development we propose to provide new approach of the method for confirming compliance of information system of information security requirements by establishing criteria for compliance. The purpose of such event is to legislate the requirements of the standards of the family of information security management system (ISMS) for certain categories of information, which is protected by the legislation of Ukraine.