Content Gen Dashboard

On May 14, 2026, the Administration of the State Service of Special Communications and Information Protection of Ukraine (SSSCIP) approved a new Monitoring Procedure under Order No. 353 to assess the readiness and effectiveness of cyber incident, cyberattack, and cyber threat response teams (CSIRTs) across Ukraine. The framework introduces systematic evaluation of national cybersecurity response capabilities to ensure consistent and resilient protection. Under the new assessment framework, response teams will be evaluated against maturity levels defined in the Requirements for the Organisational and Technical Capabilities of Cyber Incident Response Teams. The evaluation process measures specific metrics outlined in the regulations and includes reviewing internal documentation, inspecting technical and physical infrastructure, and conducting staff interviews. Each response team must complete an annual self-assessment. During the first operational year, the SSSCIP Administration will partner with CERT-UA to assess sectoral and regional teams that have been delegated specific responsibilities under the Procedure for Delegating Tasks, which the SSSCIP Administration approved on February 6, 2026 (Order No. 104) and the Ministry of Justice of Ukraine registered on March 16, 2026 (No. 342/45736). Peer reviews among sectoral and regional response teams carrying out delegated tasks will occur once every three years. The SSSCIP Administration will also evaluate the capabilities of the national CERT-UA team to ensure continuous operational quality. All completed assessment reports will be submitted to the SSSCIP Administration for strategic analysis and follow-up action. The initiative establishes a standardised approach to monitoring cybersecurity response capabilities across Ukraine's critical infrastructure and sectoral teams, supporting the country's broader cybersecurity resilience objectives.

On May 14, 2026, the State Service for Special Communications and Information Protection of Ukraine (SSCIP) approved the Order on the Approval of the Procedure for Monitoring the Activities of the National Team for Responding to Cyber Incidents, Cyber Attacks, and Cyber Threats, Sectoral and Regional Teams for Responding to Cyber Incidents, Cyber Attacks and Cyber Threats (CSIRT). Monitoring is carried out by: Conducting a self-assessment of the compliance of organisational and technical capacity with the maturity level determined by the Requirements for Organisational and Technical Capacity . Conducting a mutual assessment of the compliance of organisational and technical capacity with the maturity level defined by the Requirements for Organisational and Technical Capacity . A self-assessment of the compliance of organisational and technical capacity with the maturity level defined by the Requirements for Organisational and Technical Capacity is conducted by the response team independently at least once a year. The self-assessment is conducted by an employee or a group of employees of the response team of no more than three people. Based on the results of the self-assessment, the employee or group of employees of the response team who conducted the self-assessment shall, no later than 30 days after its completion, prepare a report in the form in accordance with the appendix to the SSCIP. The report shall be signed by the response team member or group of members who conducted the self-assessment and the response team leader. This order shall enter into force on the date of its official publication.

meta_id 3293818

Generated

Ukraine's State Service of Special Communications and Information Protection Establishes Cyber Incident Response Team Assessment Framework

Agent draft

Published

Ukraine's State Service of Special Communication and Information Protection Adopts Procedures on Cybersecurity