Cybersecurity and Information Systems Protection

The Importance of Information Security

Information security is a critical field aimed at protecting all data, information systems, servers, and the network infrastructure of the academy. Its primary objective is to ensure the confidentiality, integrity, and availability of information.

The information security system provides protection of data against:

• unauthorized access,

• loss,

• intentional or accidental modification,

• destruction.

In addition, it includes monitoring compliance with security requirements during the use of information resources and the implementation of preventive measures.

All activities in this area are carried out in full compliance with the legislation of the Republic of Kazakhstan, including:

• the Law “On Personal Data and Their Protection” No. 94-V (2013)
  https://adilet.zan.kz/rus/docs/Z1300000094

• and the Law “On Informatization” (November 24, 2015, No. 418-V of the Republic of Kazakhstan)
  https://adilet.zan.kz/rus/docs/Z1500000418

Main Objectives and Goals

1. Comprehensive Protection of All Information Resources of the Academy

Protection is ensured for all databases, servers, information systems, and network infrastructure used by the academy against:

• cyberattacks,

• malicious software,

• unauthorized access,

• technical failures.

In addition, an information security policy is implemented and regularly updated.

2. Protection of Personal Data of Students and Staff

Maintaining the confidentiality of personal data of students and staff is one of the key priorities of information security.

In this area, the following measures are undertaken:

• prevention of unlawful dissemination of personal data,

• prevention of modification or destruction of information,

• strict compliance with personal data protection requirements.

3. Ensuring Stable and Uninterrupted Operation of Information Systems and Networks

Stable and reliable operation of the academy’s information systems and networks enhances the efficiency of the educational process and administrative activities.

To achieve this, the following actions are carried out:

• continuous system monitoring,

• data backup,

• prompt response to potential threats and risks.