DREAM / The Prime Minister resigns and wakes up under the Parisian bridge!

 Kliko këtu për të tjera
Voxpress:

The law on cyber security changes, new obligations for private individuals

2024-01-08 13:26:43Biznes SHKRUAR NGA REDAKSIA VOX

The law on cyber security changes, new obligations for private individuals

The Cyber ​​Security Law will undergo significant changes. Within the first four months of the year, the Council of Ministers will have ready a draft law which will give new powers to the bodies responsible for cyber security, as well as ensure the alignment of Albanian legislation with that of the European Union.

The draft law is expected to be ready before May in the calendar of the Government's draft acts, and specifically provides for the expansion of the powers of the Authority responsible for cyber security, a clear definition of the structures responsible for cyber security as well as their roles and powers. Also, the draft law will strengthen the obligations of the operators of information infrastructures as well as cyber security measures, the handling of emergency situations, the cyber crisis, as well as the determination of the relevant structures for their management, the regulation of cyber security certification.

At the same time, in the first four months, there will also be an intervention in the way of defining the rules and forms of self-declaration, as well as the procedures for the device with the authorization to meet the electronic security standards. It is about some interventions in the 2023 Law "On Electronic Government".

The developer of a system in the ICT field (either a public authority or a private entity) must: first, ensure that information technology systems process information in order to guarantee the efficiency of service provision; secondly, to identify the systems or parts of the systems, which are critical for the provision of the service 24 hours a day, 7 days a week and to have documented plans for risk management, management techniques and evaluation of its performance.

In order to guarantee the proper functioning of these risk management techniques, the institution performs internal audits; identify primary data and other data, which are relevant to the operation of its information technology system.

Thirdly, the entities are forced to identify the specific devices (hardware) and the dependency that the system, data and services have on them. The changes will ensure that measures are taken so that the failure of one of these devices does not affect the operation of the information technology system and the services provided. And fourth, the entities must take measures that the above data, which will be stored for the purpose of restoring the systems and services to work, are stored in a secondary physical location different from the one in which the systems and data are located of the institution during its normal activity.


Në përputhje me standarded JTI

Video

SHIKO KANALIN NE YOUTUBE
×