The list of means of technical protection of information allowed to ensure the technical protection of state information resources and information, the requirement for the protection of which is established by law

This List is formed in accordance with paragraph 17 of the Regulation on technical protection of information in Ukraine, approved by the Decree of the President of Ukraine of September 27, 1999 No. 1229. The list is intended for use by the subjects of the system of technical protection of information (TSI) during the development, modernisation and implementation of TPI complexes at the objects of information activity (ISS) and integrated information security systems (CSIS) in automated systems. The list contains the nomenclature of vehicles (technical means, the main functional purpose of which is to protect information from threats of leakage, violation of integrity and blocking; technical means in which, in addition to the main purpose, the functions of information protection are provided; means that are designed, specially designed or adapted to search for embedded devices and which pose a threat to information; means that are specially developed or adapted to assess the security of information), the compliance of which to the requirements of regulatory documents on TSI is certified by a certificate of conformity or a positive expert opinion obtained in the manner established by regulatory legal acts: Rules for the certification of information protection tools approved by the joint order of the Administration of the State Special Communications Service and the State Service for Consumer Protection of Ukraine dated 25.4.2007 No. 75/91 and registered in the Ministry of Justice of Ukraine 14.5.2007 under No 498/13765, and the Regulations on State Expertise in the field of technical protection of information, approved by the order of the Administration of the State Special Communications Service of Ukraine dated 16.5.2007 No. 93 and registered in the Ministry of Justice of Ukraine 16.7.2007 for No 820/14087. The use of the means of this List during the creation, modernisation and implementation of TSI complexes at the JIS and CSSI in the AS does not exempt from the need to assess the compliance of the achieved level of information security to the established requirements of regulatory documents on the TPI, which is carried out by certification of TSI complexes at the JIS or examination of the CCSI in the AS. The procedure for the use of TPIs, which are not included in this List, in the TSI complexes for the JIS and the CSIS in the AS is determined by regulatory documents in the field of TPI. The update of the information contained in the List is carried out by periodically making changes to the previous edition. The list and its additions are posted on the website www.dsszzi.gov.ua. For additional information about the means from this List, the state of their production and the order of delivery, it is necessary to contact the manufacturer (supplier).本清单依据乌克兰1999年9月27日第1229号总统令批准的《乌克兰信息技术防护条例》第17条制定。本清单供信息技术防护（Technical Protection of Information, TSI）系统主体，在自动化系统（Automated Systems, AS）内的信息活动对象（Information Activity Objects, ISS）及综合信息安全系统（Integrated Information Security Systems, CSIS）中开展信息技术防护综合体的开发、升级与部署工作时使用。 本清单涵盖以下器材名录：主要功能为防范信息泄露、完整性破坏与阻断威胁的技术手段；除核心功能外兼具信息防护功能的技术手段；专为、经专门设计或改造用于搜寻嵌入式设备且可能对信息构成威胁的器材；专为开发或改造用于评估信息安全的器材。上述器材需符合信息技术防护相关监管文件的要求，其合规性需依据监管法律规定的程序，通过获取合格证书或正面专家鉴定意见予以认证：一是2007年4月25日乌克兰国家特殊通信服务局与乌克兰国家消费者权益保护局联合发布的第75/91号《信息防护工具认证规则》，该规则于2007年5月14日在乌克兰司法部登记，登记号为498/13765；二是2007年5月16日乌克兰国家特殊通信服务局发布的第93号《信息技术防护领域国家鉴定条例》，该条例于2007年7月16日在乌克兰司法部登记，登记号为820/14087。 在自动化系统内的信息活动对象（ISS）及综合信息安全系统（CSIS）中开展信息技术防护综合体的创建、升级与部署工作时，使用本清单所列器材，并不免除对已达成的信息安全水平是否符合信息技术防护相关监管文件要求进行评估的义务，该评估需通过对信息活动对象（ISS）内的信息技术防护综合体进行认证，或对自动化系统内的综合信息安全系统（CSIS）开展鉴定的方式实施。 未列入本清单的信息技术防护器材（Technical Protection of Information, TPI）在自动化系统内的信息活动对象（ISS）及综合信息安全系统（CSIS）的信息技术防护综合体中使用的程序，需依据信息技术防护领域的监管文件确定。 本清单所载信息的更新，将通过定期修订前版的方式实施。本清单及其增补内容将发布于网址www.dsszzi.gov.ua。 如需获取本清单所列器材的更多相关信息、其生产状况及交付流程，请联系生产商（供应商）。