Legislative provision

Continuation
Organizations as well as different firms can develop their own
standard and legislative documents that are oriented into
Information Security provision. The acts take into account State
standard acts.
Such documents can be:
- Regulations on Confidential Information Reservation
• List of data that are considered as confidential information
• The access instruction to the confidential information
• Regulations on special office work and documents circulation
• List of data allowed for wide publishing
• Regulations on cooperative work with foreign organizations and their
representatives
• Liability of employee about Confidential Information Reservation
• Employee written rules about Confidential Information Reservation
All mentioned acts are pointed to
prevent illegal divulging information
accidents at the legislative base.
When infringement of standard and
legislative acts the corresponding
influence should be made.
There are next forms of information security according to the
character of information, availability of information for
interested customers and economical advisability of defensive
measures:
- Patenting
- Intellectual property rights (copyright)
- Recognition of confidentiality of data
- Trade mark
- Administration of law of obligation
There is difference between Intellectual property
rights and commercial secrecy.
Intellectual property rights defences only the
form of idea expression.
The commercial secrecy deals with content.
Intellectual property rights defences from coping
independently on confidential relations with
owner.
Intellectual property rights are used when
wide publication of information while
Commercial secrecy is kept in secrecy.
The Commercial and Official secrecy are
more convenient, reliable and flexible
ways for Information Security compare to
Patent and Intellectual property rights.
There is also transferring right in the form
of licence.
Licence is permission that is given by the
State for making some kind of activity
including international activity and
empowering use defended with patent
inventions, methodic, technique.
Licence is given for definite time and
definite types of goods.
Commercial Secrecy
Commercial secrecy is data that are
not a State Secret but connected
with industry, technology,
management, finances and other
activity. The divulgence, leakage and
unauthorized access can make a
damage to the owner of this
information.
The commercial secrecy can be
• The data under State defence.
• The data well known at the legal base.
• Open to general use data, patents,
trade marks.
• The information about negative
activity.
• Constitutive documents and data
about economical activity
Each of the form of intellectual
property has corresponding laws.
The legislative standards for
information security provision in any
specific organization are represented
as set of Constitutive, organizational
and functioning documents.
The requirements to information Security
provision are represented in Statute as the
following statements:
- The enterprise is entitled to define the
content, volume and order of defence of the
confidential data and is entitled to demand
from employee to defend and preserve
information from internal and external
threats.
- The enterprise is obliged to provide safe
keeping the confidential information.
These requirements allows enterprise:
- To create organizational structure
responsible for information security.
- To issue standard and administrative
documents that define order of
determination of confidential data as well
as the ways of the data defence.
- To include Information Security items into
the contracts of all economical activities
fields.
- To demand the assistance of State and the
legal organizations when defending interests
of the enterprise.
- To use information that is the property of
the enterprise for turning to advantage.
- To develop the “list of confidential
information”. The requirements to legal
assistance for Information Security are
included into the collective agreement.
The use of agreements on
confidentiality of data is not the
measure to defend information. It is
just the warning employee. The next
step is to provide measures for
keeping confidential data in secret.
Confidentiality is the way of operating
with data considered as commercial
secrecy on the base of organizational
measures that exclude illegal obtaining
the data.
Contracts are the agreement of two or
more bodies about establishing,
changing or discontinuance of relative
obligations.
Liability is the civil matter according to
which one side should make definite
actions in favour of other side.

The legislative measures of

Information Security provision are
the basis for activity order of
enterprise and employee behavior
and provide the responsibility
measures for breaking established
standards.