The Ministry of Defense of Ukraine is taking significant steps to bolster resilience against cyber threats. On October 15, order No. 692/nm was issued, approving a new Sectoral Security Profile—a set of standards for safeguarding information systems that handle open, confidential, or official information.
This document outlines the minimum requirements for cybersecurity applicable to systems used within the Ministry of Defense, the Armed Forces of Ukraine, and the State Special Transport Service. It has been crafted in line with international standards and national legislation, taking into account the specificities of the defense sector.
“Unified cybersecurity rules will allow us to better protect our information resources and accelerate the implementation of new services,” stated Oksana Ferchuk, Deputy Minister of Defense for digital affairs.
The primary goal of the profile is to ensure a standardized approach to data protection, enhance cybersecurity levels, and simplify the compliance assessment process for systems. The profile includes requirements for access control, data protection, security monitoring, and recommendations for implementing administrative and technical measures. All units working with the profile will undergo training for its application.
It is worth noting that the Sectoral Security Profile was developed in accordance with the resolution of the Cabinet of Ministers of Ukraine dated June 18, 2025, No. 712. It is mandatory for all systems that process open, confidential, or official information (except for automated systems of class “1”).