Article 11. Authorized state body in the sphere of cybersecurity

The state security service of the Republic of Uzbekistan is the authorized state body in the sphere of cybersecurity (hereinafter — the authorized state body).

The powers of the authorized state body in the sphere of cybersecurity include:

development of normative legal acts and state programs in the sphere of cybersecurity;

exercising control over the execution of acts of legislation on cybersecurity;

carrying out operational-search activities, preliminary inquiries, and investigative actions on cybersecurity incidents;

prevention, detection, and preclusion of cybersecurity incidents and taking corresponding measures regarding them, including organizational and technical measures to eliminate their consequences;

cyber protection of information systems and resources during emergency situations and the development of plans containing measures on other issues in the sphere of cybersecurity;

organization of works to ensure cybersecurity, as well as works on the prevention, detection, and elimination of the consequences of cyberattacks on critical information infrastructure objects;

organization of works on the certification of hardware, hardware-software, and software tools in information systems and resources in accordance with cybersecurity requirements;

organization of conducting research and monitoring in the sphere of cybersecurity;

formation of a unified register of critical information infrastructure objects, as well as the organization and assurance of its maintenance;

adoption of a decision on the inclusion of objects in the unified register of critical information infrastructure objects based on information submitted by cybersecurity subjects;

determination of requirements for ensuring the cybersecurity of critical information infrastructure objects;

determination of the procedure for conducting the attestation of informatization objects and critical information infrastructure objects in accordance with cybersecurity requirements;

licensing of activity for the development, production, and realization of means of cryptographic information protection;

taking measures to protect the rights and legitimate interests of users of information systems and resources;

conducting studies and inspections of information systems and resources of cybersecurity subjects, as well as at critical information infrastructure objects;