Methodology

The main goal of the methodology is to help organizations adapt to changes in cybersecurity and strengthen their defense against threats. This is your simple guide to information security in Kazakhstan: let’s figure out what it is, who is responsible for what, what standards work in the Republic of Kazakhstan, how to improve protection and where to go. For everyone - from employees to managers.Our methodology is aimed at increasing the level of information security of organizations and creating a secure digital environment.

The process includes analyzing current security measures, assessing their effectiveness and implementing solutions in accordance with the requirements of regulators and international standards.

Let's figure it out together!

Important note: The authors do not claim absolute accuracy according to the norms of the Republic of Kazakhstan (from the point of view of the current regulatory legal acts of the Republic of Kazakhstan). The goal is to improve the security of your systems and raise awareness.

Composition of the methodology

Article 1

What is information security and which documents regulate it?

Article 2

Who and why must comply with information security requirements in the Republic of Kazakhstan?

Article 3

What is a CII?

Article 4

What does the Information Security Department do?

Article 5

What is a SOC, and who needs it?

Article 6

What are compliance tests for information security requirements, who conducts them, and who needs to pass them?

Article 7

What is an audit of information systems, who conducts it, and who needs to pass it?

Article 8

What is an instrumental examination of information system components?

Article 9

What is the trusted software registry?

Article 10

What is the assurance level or compliance with ST RK ISO/IEC 15408-3?

Article 11

Independent pentest

Article 12

Why the Trusted Software Registry

Article 13

How to classify an information object

Article 14

Useful links and resources.

Article 15

Feedback

Home Feed All Courses Methodology

FAQ