Article 29. Requirements for ensuring the cybersecurity of critical information infrastructure objects

Critical information infrastructure subjects are obliged to fulfill the requirements established by the authorized state body for ensuring cybersecurity at the critical information infrastructure objects belonging to them.

Critical information infrastructure subjects, in agreement with the authorized state body and proceeding from the specifics of the work of critical information infrastructure objects, may establish additional requirements for ensuring cybersecurity.

Employees responsible for ensuring the cybersecurity of critical information infrastructure objects undergo attestation conducted by the authorized state body, in the manner established by legislation.

The system for ensuring the cybersecurity of critical information infrastructure objects, created by the critical information infrastructure subject, is connected to the system for monitoring and managing cybersecurity incidents of critical information infrastructure objects of the authorized state body, based on the decision of the authorized state body.