Kazakhstan's Cyber Shield

The concept of cyber security ("Cyber Security of Kazakhstan") is developed in accordance with the message of the President of the Republic of Kazakhstan "Third modernization of Kazakhstan: Global competitiveness" taking into account approaches of Strategy "Kazakhstan-2050" on occurrence of Kazakhstan among 30 most developed states of the world.

Achievement and maintenance of the level of security of electronic information resources, information systems and information and communication infrastructure from external and internal threats, which will ensure sustainable development of the Republic of Kazakhstan in conditions of global competition.

Establishment of the necessary conditions for timely and prompt awareness of external and internal threats, as well as for the development of the capacity of the domestic information and communications technology industry to create software products and cybersecurity systems aimed at blocking and suppressing malicious software and hardware impacts.

Improvement of law enforcement practice, methodological basis, regulatory and organizational and technical support for safe use of information and communication technologies in the national information protection system and security of automated process control systems. 

Establishment of a highly adaptive and integrated public information security management system for information and communications technology for the entire national information and communications infrastructure.

First phase (2017-2018):

• a detailed law enforcement practice of compliance with already established requirements in the area of information security has been formed, which will result in the necessary amendments to legislation;
• an audit of educational programmes and professional standards has been conducted, the number and quality of trained specialists in the field of information security has been increased, and the qualifications of existing employees working in this field have been upgraded;
• an effective scheme of interaction and cooperation between industry and science in creation of domestic workings out that will create a basis for development of the national and branch operational centers of information safety is constructed,

Second phase (2019-2022):

• participation of Kazakhstani IT-companies in providing national information and communication infrastructure with information security systems;
• loading of domestic enterprises of electronic industry with orders to purchase telecommunication equipment produced and certified for compliance with information security requirements in the country by state authorities and quasi-state sector.

 

Indicator name	2018 (plan)	2018 (fact)	2019 (plan)	2019 (fact)
Kazakhstan Global Cyber Security Index	0,300	0,778 (40th place)	0,400	no report has been published
Raising awareness of IS threats for the 2018 baseline period		2018 base period, awareness was 63%	by 5% of the 2018 base period	January 2020
Number of retrained IS specialists	300	701	500	243 (as of May)
Increase in the share of domestic software products in the field of informatization and communications used in the public and quasi-governmental sectors by the base period of 2017	by 10%	21,65 % (base year 2017 - 9.3%)	by 20%	January 2020
Percentage of use of domestic security certificates for encrypted data transfer by Internet resources with .KZ and .ҚАЗ domain.	20%	25% (a total of 117916, of which 88978 didn't use a security certificate).	40%	96% (a total of 97076, of which 4245 doesn't use a security certificate).
Share of IS of state agencies, non-state IS integrated with state, IS of critical information and communications technology infrastructure connected to IS monitoring centers*	20%	35 IS of state agencies and 293 of quasi-public sector and critical information and communications technology infrastructure are connected.	40%	January 2020

To date, 2 operational centers of information security of JSC "National Information Technologies" and JSC "Transtelecom" have been created.

35 information systems of state bodies out of 495 available on the architectural portal are connected to JSC "National Information Technologies".

293 information systems of quasi-public sector are connected to JSC "Transtelecom" , critical information and communication infrastructure objects, as well as non-state information systems, which are integrated with state ones.

The legal status of subjects engaged in activities in the field of information security is determined by the Law of the Republic of Kazakhstan "On informatization" dated November 24, 2015.

These subjects are the Information Security Incident Response Service, which provides consultative and technical assistance in eliminating the consequences of information security incidents and Information Security Operations Centers, which are created on departmental and sectoral principle (financial and banking sphere, energy, etc.).

According to the Act "On Informatization" of Kazakhstan, these services operate under a license to provide services to identify technical channels of information leakage and special technical means intended for operational and search activities. The license is issued by the National Security Committee of the Republic of Kazakhstan.

In 2019 JSC "NITEC" (ISOC), JSC "Transtelekom" (ISOC), Center for Analysis and Investigation of Cyber Attacks Association of Legal Entities (Information Security Incident Response Service) received the licenses for these activities.