Article 12. Rights of the authorized state body

The authorized state body, when exercising powers in the sphere of cybersecurity, has the right to:

lease technical, software, and hardware-software tools intended for the detection of cyberattacks, the prevention and elimination of their consequences, as well as taking measures regarding cybersecurity incidents;

use technical installations and services free of charge for taking urgent measures to eliminate cyberattacks;

visit state bodies and other organizations, get acquainted with necessary documents and materials, as well as request and receive from state bodies and other organizations, and citizens, information and other necessary documents and materials, conduct their identification, and use them in investigative actions on cybersecurity incidents;

create a working body for ensuring cybersecurity, as well as transfer a part of its powers to it;

issue prescriptions and instructions, mandatory for execution, to cybersecurity subjects regarding the elimination of causes and conditions that contributed to the commission of offenses posing a threat to cybersecurity;

have unobstructed access and connection, in the established manner, to the information systems and resources of state bodies and organizations, and critical information infrastructure objects, for the purpose of exercising the function of state control and verification of the cybersecurity status, as well as studying data regarding the implementation and operation of means for ensuring the cybersecurity of the information systems and resources of these objects;

have access to monitoring systems or critical information infrastructure objects for the implementation of organizational and technical measures when conducting monitoring works to ensure cybersecurity;

enter residential premises and other objects of physical and legal entities without hindrance, with damage to locking devices and other items if necessary, and inspect them when pursuing persons suspected of committing crimes in the sphere of information technologies, or when there are sufficient grounds to believe that such a crime is being committed or has been committed there, or a person who has escaped from law enforcement bodies is located there, or if delay may threaten the life and health of citizens, with subsequent notification of the prosecutor about this within twenty-four hours, as well as with compensation for the caused harm in the manner established by legislation.