1.0
Methodology
Imagine that we are officials responsible for ensuring information security, or wish to become them in the future.
What do you need to know and be able to do for this? Let's figure it out together!
Disclaimer: The authors do not claim absolute accuracy in the materials on information security (from the perspective of current regulatory legal acts of the Republic of Kazakhstan). The aim of the work is to improve the protection of your systems and raise staff awareness.
Composition of the methodology
Article 1
What is information security and which documents regulate it?
MoreArticle 2
Who and why must comply with information security requirements in the Republic of Kazakhstan?
MoreArticle 3
What is a CII?
MoreArticle 4
What does the Information Security Department do?
MoreArticle 5
What is a SOC, and who needs it?
MoreArticle 6
What are compliance tests for information security requirements, who conducts them, and who needs to pass them?
MoreArticle 7
What is an audit of information systems, who conducts it, and who needs to pass it?
MoreArticle 8
What is an instrumental examination of information system components?
MoreArticle 9
What is the trusted software registry?
MoreArticle 10
What is the assurance level or compliance with ST RK ISO/IEC 15408-3?
MoreArticle 11
Useful links and resources.
MoreArticle 12
Feedback
More