Abstract

The article analyzes the NATO standards, discusses the possible application of NATO standards in the creation and implementation of integrated information security systems at the stages of the life cycle of information systems in the area of national security. There is a difference in the provisions of the normative acts of Ukraine and NATO regarding the definition of information security. NATO ‒ multi-element education, respectively, all regulatory regulation of information security is aimed at ensuring the interoperability of member countries systems while maintaining significant autonomy. NATO's regulations emphasize that the national regulatory framework remains the responsibility of each NATO member state, but does not require the transition to NATO regulations. Only minimal requirements are available, but they are identical to those adopted globally and specified in international standards and in Ukraine. When it comes to information systems for defense purposes, for them ensuring the availability of the system and the security of communications and communications during tactical operations are just the most important. We have defense information systems in the legislation, as well as any information systems, with only increased protection requirements. The use of separate provisions set by NATO standards, which specifically addresses the increased requirements for system availability and secure communication, would help to narrow the focus of national legislation on the increased requirements for information systems. Since the provisions of NATO standards are directed, first of all, to uniting a large number of legal rules of the Alliance member countries, some principles may be applied for the unification (establishment of information exchange) between the information systems of different structures of our state.

Authors and Affiliations