Ukraine's State Service of Special Communication and Information Protection has decided not to issue an information protection certificate for the public register of declarations of persons authorized to fulfill public or local government functions of the National Agency for Corruption Prevention (NACP).
The press service of the authority said that it examined the information protection system under an order of the NACP.
Miranda LLC is software designer under an agreement with United Nations Development Programme (UNDP).
“When NACP made the decision to conduct the public examination (on August 2), the materials and software code was given to the State Service of Special Communication and Information Protection only on August 10 and the two-hour access to technical devices and equipment of the register was provided without passwords on August 11. All these have considerably complicated the examination,” the press service said.
Many information protection solutions implemented in software did not comply with the technical task requirements.
The system is not able to provide security for some of its functions, for example, in part of identifying declarants using BankID services.
The documents do not contain test exploitation completion certificate, information protection system creation completion certificate and the protocol of its previous tests.
The authority believes that the information protection system of the register in its interaction with other registers and databases has not been implemented.
Software is partially designed and it cannot provide for reliable protection of information in the electronic declaration system.
The expert council for public examination in the area of technical protection of information urges NACP to remove drawbacks of the information protection system as soon as possible.
The State Service of Special Communication and Information Protection is ready to urgently repeat the public examination and issue the certificate.
