Application of international standards with a view to ensuring legal and organizational aspects of information protection in specialized information systems

Aplicación de normas internacionales con miras a garantizar los aspectos legales y organizativos de la protección de la información en los sistemas de información especializados

• Sviatoslav Senyk Ivan Franko National University of Lviv, Ukraine. https://orcid.org/0000-0002-4187-9715
• Oleksandr Kondratiuk Lviv State University of Internal Affairs, Ukraine. https://orcid.org/0000-0001-6102-2690
• Ihor Fedchak Lviv State University of Internal Affairs, Ukraine. https://orcid.org/0000-0002-4539-5988
• Stepan Tserkovnyk Lviv State University of Internal Affairs, Ukraine. https://orcid.org/0000-0002-2293-1880
• Marianna Fedun Ivan Franko National University of Lviv, Ukraine. https://orcid.org/0000-0001-9188-7142

DOI: https://doi.org/10.46398/cuestpol.4176.24

Keywords: information security, cybersecurity, specialized information systems, information resources, international legal standard

Abstract

The article analyzes the regulatory and legal framework of Ukraine in the field of information protection, in order to develop proposals on the improvement of organizational and legal measures aimed at the protection of information resources in specialized information systems of the state authorities of Ukraine. It was imposed the necessity to clearly identify at organizational and legal level the problems of safe operation of specialized information systems, to determine the key threats in the field of information protection and to provide in time new modern legal tools to counteract the threats. The need for reorganization and improvement of organizational and legal measures aimed at information protection was considered. Dialectical, hermeneutic, inductive and deductive methods of analysis and synthesis were used in the research. It was concluded that changing the legal framework in the field of information protection is a time challenge, and only the most rapid modernization of organizational and legal measures aimed at protecting information in specialized information systems will ensure the task of sustainable operation of specialized information systems.

References

BURIACHOK, Volodymyr; TOLUBKO, Volodymyr; KHOROSHKO, Volodymyr; TOLIUPA, Sergii. 2015. Information and Cyber Security: Social and Technical Aspect. DUT. Kyiv, Ukraine.

CRIMINAL CODE OF UKRAINE. 2001. Available online. In: https://zakon. rada.gov.ua/laws/show/2341-14. Consultation date: 12/10/2022.

DOVHAN, Оleksandr; ТKACHUK, Тaras. 2019. “Conceptual Principles of Legislative Provision of Information Security of Ukraine” In: Information and Law. Vol. 1, No. 28, pp. 86–99.

DUBOV, Dmytro; OZHEVAN, Mykola. 2011, The Problems of Applicable Domestic Regulatory Legal Base in the Field of Cyber Crime Counteraction: Key Directions of the Reform: Analytical Note. Available online. In: https://niss.gov.ua/doslidzhennya/nacionalna-bezpeka/ problemi-chinnoi-vitchiznyanoi-normativno-pravovoi-bazi-u-sferi. Consultation date: 12/09/2022.

FOROS, Hanna. 2016. “Legal Regulation of Cybercrime Counteraction” In: The State of Law. Vol. 24, pp. 164–169.

GUTNYK, Vitalii; BRATSUK, Ivan; BURAK, Stepan; ZUBAREVA, Antonina. 2021. “The concept of constitutional pluralism as the fundamental basis for the development of the European Union legal order” In: Revista de la Universidad del Zulia. Vol. 12, No. 34, pp. 361-378.

ND TZI 2.5-004-99. 2012. The Criteria for Assessing Computer System Information Protection against Unauthorized Access: approved by order of the Department of Special Telecommunication Systems and Information Protection of the Security Service of Ukraine 28 April, 1999 with amendments introduced under order of the Administration of the State Service for Special Communication and Information Protection of Ukraine No. 806. Available online. In: https://tzi.ua/assets/ files/%D0%9D%D0%94-%D0%A2%D0%97%D0%86-2.5-004-99.pdf.Consultation date: 12/09/2022.

NEW ISO/IEC STANDARD WILL HELP COPE WITH THE MOST SERIOUS INFORMATION SECURITY RISKS: INFORMATION TECHNOLOGY. 2016. Available online. In: http://csm.kiev.ua/index.php?option=com_content&view=article&id=1068:-isoiec-&catid=41:2009-10-16-12-08-07&lang=uk&Itemid=. Consultation date: 12/09/2022.

ON APPROVAL OF THE CONCEPT OF DEVELOPING DIGITAL ECONOMY AND SOCIETY OF UKRAINE FOR 2018–2020 AND APPROVAL OF THE ACTION PLAN FOR ITS IMPLEMENTATION: ORDER OF THE CABINET OF MINISTERS OF UKRAINE. 2018. Available online. In: https://zakon.rada.gov.ua/laws/show/67-2018-%D1%80. Consultation date: 12/09/2022.

ON INFORMATION: LAW OF UKRAINE. 1992. Available online. In: http://zakon2.rada.gov.ua/laws/show/2657-12. Consultation date: 12/09/2022.

ON STANDARDIZATION: LAW OF UKRAINE. 2014. Available online. In: http://zakon.rada.gov.ua/laws/show/1315-18. Consultation date: 12/09/2022.

ON THE DECISION OF THE COUNCIL FOR NATIONAL SECURITY AND DEFENSE OF UKRAINE. ON THE DOCTRINE OF INFORMATION SECURITY OF UKRAINE: DECREE OF THE PRESIDENT OF UKRAINE. 2016. Available online. In: https://www.president.gov.ua/ documents/472017-21374. Consultation date: 12/09/2022.

ON THE MAIN PRINCIPLES OF ENSURING CYBER SECURITY OF UKRAINE: LAW OF UKRAINE. 2017. Available online. In: http:// zakon.rada.gov.ua/laws/show/2163-19. Consultation date: 12/09/2022.

ON THE NATIONAL SECURITY OF UKRAINE. 2018. Available online. In: http://zakon.rada.gov.ua/laws/show/2469-19. Consultation date: 12/09/2022.

ON THE PROTECTION OF INFORMATION IN INFORMATION AND TELECOMMUNICATION SYSTEMS: LAW OF UKRAINE. 1994. Available online. In: http://zakon2.rada.gov.ua/laws/show/80/94-
%D0%B2%D1%80. Consultation date: 12/09/2022.

PROGRAM OF WORKS IN NATIONAL STANDARDIZATION. 2017. Available online. In: http://uas.gov.ua/standrarization/prohrama-robit-z- natsionalnoi-standa/. Consultation date: 12/09/2022.

RUDYI, Taras; SENYK, Volodymyr; RUDYI, Аndrii; SENYK Sviatoslav. 2018. “Organizational and Legal, Criminalistic and Technical Aspects of Counteracting Cybercrime in Ukraine” In: Scientific Bulletin of Lviv State University of Internal Affairs. Law Series. Vol. 1, pp.283-301.

RUDYI, Taras; ZAKHAROVA, Oleksandra; SENYK, Volodymyr; SENYK, Sviatoslav; IZIO, Marta. 2017. “Organizational and Legal Support of Information System Protection of the Units of the National Police of Ukraine on the Basis of International Standards” In: Scientific Bulletin of Lviv State University of Internal Affairs. Law Series. Vol. 2, pp. 213-225.

SENYK, Sviatoslav. 2018. “The Study of Organizational Basics for Constructing Comprehensive Restricted-Access Information Protection Systems in the units of the National Police of Ukraine” In: Scientific Bulletin of Lviv State University of Internal Affairs. Law Series. Vol. 4, pp.180-189.

SEREDA, Valerii; ZHYVKO, Zinaida; RUDYI, Тaras. 2017. “Regulatory Legal Aspects of Applying International Standards in the System of Company Security Management” In: Modern Problems of Computer Science in Management, Economy, Education and Overcoming of the Consequences of the Chernobyl Disaster (materials of the XVIth International Scientific Workshop. National Academy of Administration). Kyiv, Ukraine.

THE STRATEGY FOR THE DEVELOPMENT OF THE SYSTEM OF THE MINISTRY OF INTERNAL AFFAIRS OF UKRAINE UNTIL 2020: ORDER OF THE CABINET OF MINISTERS OF UKRAINE. 2017. Available online. In: https://zakon.rada.gov.ua/laws/show/1023-2017-
%D1%80#Text. Consultation date: 12/09/2022.

WOJCIECHOWSKI, Sebastian. 2017. “Contemporary Terrorism іn The European Union – The Hydra Syndrome?” In: Przegląd Strategiczny. No. 10, pp.295-305.

YANKOVSKYI, Oleksii. 2017. “What Is Wrong with the Draft Law on Cyber Security and How to Improve It” Available online. In: http:// ain.ua/2017/06/10/kiberbezpeka-v-nebezpeci. Consultation date: 04/10/2022.

YANKOVSKYI, Oleksii. 2019. “Ukraine Needs a New Cyber Strategy” Available online. In: https://www.pravda.com.ua/ columns/2019/09/14/7226291/. Consultation date: 06/10/2022.