Cybersecurity oversight in government organizations to be strengthened
Uzbekistan plans to introduce a new system for monitoring cybersecurity tasks in state bodies and organizations. According to the relevant project, tasks to eliminate identified vulnerabilities and shortcomings in information systems will be monitored through a separate module of Ijro.gov.uz.
A draft decree has been developed to amend and supplement certain documents of the President of Uzbekistan aimed at strengthening cybersecurity control in state organizations.
This document is aimed at ensuring cybersecurity in the process of digitizing sectors and regions, optimizing bureaucratic processes, and improving the system for monitoring the implementation of tasks related to digitization.
According to the draft, control and accountability over the implementation of tasks related to cybersecurity will be organized through a separate module in the "Ijro.gov.uz" system.
In this case, the body responsible for conducting an expertise in the field of cybersecurity will formulate relevant tasks on the identified vulnerabilities and shortcomings in the information systems and databases of state bodies, organizations, and enterprises with a state share.
The shortcomings identified during the expertise, instructions and suggestions given are also included in these tasks and systematically submitted to the Cabinet of Ministers.
The Cabinet of Ministers, in turn, will control them in a special module of "Ijro.gov.uz" and direct them to responsible executors. The implementation of tasks will be monitored based on weekly reports.
It is envisaged that tasks related to cybersecurity will be released from control by the Cabinet of Ministers only based on a positive conclusion from the Ministry of Digital Technologies.
It is also envisaged that the deadline for the implementation of tasks related to digitalization will be extended based on the terms of a three-stage cybersecurity expertise. Such an extension can be implemented only once for each stage by the Ministry of Justice, based on the proposal of the Ministry of Digital Technologies, in agreement with the Accounts Chamber.
The draft also specifies restrictions on the direct integration of state information systems and resources of state bodies, state organizations and enterprises with state shares with the information systems of other organizations, legal entities and individuals.
It is envisaged that the First Deputy Chairman of the Accounts Chamber, the Minister of Justice, and the Minister of Digital Technologies will be personally responsible for the implementation of the decree, while the prime minister will be responsible for overall control and coordination of the activities of the responsible organizations.