The digital platform for meeting the needs of the Armed Forces of Ukraine, the DOT-Chain, became the third state information and communication system in Ukraine to pass an assessment of compliance with international standards based on NIST RMF security profiles. The audit also covered the functionality of the DOT-Chain Defence arms marketplace.
NIST RMF is one of the most prestigious international standards in the field of cybersecurity, developed by the US National Institute of Standards and Technology. It is widely used in public and defence management. Thus, NIST standards are mandatory for US federal agencies that work with information systems. In particular, the Pentagon, NASA, CIA, etc.
"In the context of launching the DOT-Chain Defence weapons marketplace, data security is no less important than the functionality or stable operation of the system. That is why the DOT team is constantly developing this area. Last year, we received the European cybersecurity certificate ISO 27011. And NIST certification is a logical continuation of this process," – comments Aliona Zhuzha, IT Advisor at the DOT and Director of the Digitalisation Department at the Healthcare Agency.
We remind you that in December 2024, the State Operator for Non-Lethal Acquisition was certified according to ISO/IEC 27001. This international standard defines the requirements for an organisation-wide information security management system and covers the functioning of people, policies and technology.