Decree No. 432 / 2011 Coll.
Order to ensure cryptographic protection of classified information
Valid
Order
Effective from 01.01.2012
Zobrazeno prvních 200 z celkem 343 ustanovení tohoto předpisu.
Zobrazit celý předpis →
Pro stažení celého znění použijte tlačítko Stáhnout výše.
432
DECLARATION
of 16 December 2011
on ensuring cryptographic protection of classified information
According to Articles 44 and 53 (j) of Act No. 412 / 2005 Coll., on the Protection of Classified Information and on Security Eligibility, as amended by Act No. 255 / 2011 Coll., ("the Act '):
Subject matter
This decree sets out the details of the expert test, the methods and means of handling cryptographic material, the details of the way in which the classified information is classified in the field of cryptographic protection and the administrative aids for cryptographic protection, and other details to ensure cryptographic protection of classified information.
Definition of terms
For the purposes of this decree:
(a) a cryptographic consignment of cryptographic material equipped for transport, transported or delivered to the consignee at the place of destination until the end of its transport and its opening;
(b) by transporting a cryptographic consignment of it outside the objection1) to a State authority, a legal person or an undertaking natural person for the purpose of its delivery to the addressee;
(c) the transfer of cryptographic material to transport it outside the premises of a State authority, a legal person or an undertaking natural person whose purpose is not to deliver it;
(d) cryptographic document of the instrument or other medium of information containing classified cryptographic protection information;
(e) cryptographic hardware or software product intended for cryptographic protection or combinations thereof,
(f) cryptographic key classified variable parameter necessary to unambiguously encrypt and decrypt data;
(g) cryptographic key key on the carrier;
(h) password-protected character string on the carrier from which the cryptographic key is derived or used for authentication;
(i) material to ensure the functioning of the cryptographic device, key material and password material for cryptographic operation or other necessary means and material to ensure the functioning and safe operation of the cryptographic device.
Details of professional examination
Forms of application for professional examination
(Paragraph 39 (2) of the Law)
The application for a professional examination shall contain:
(a) identification of the applicant
1. by the trading firm or, where appropriate, by the name, registered office and identification number, where the applicant is a legal person,
2. by a trading firm, or, where appropriate, by name or by name, surname or, where applicable, by a different addition, place of permanent residence or, in the case of a stranger, by the place of similar residence and by the place of business, if different from the place of permanent or similar residence, the date of birth and the identification number, where the applicant is a natural person who is an entrepreneur; or
3. the name, registered office, identification number and, where appropriate, the name and surname of the responsible person, if any, if it is a State authority,
(b) the name and, where appropriate, the name, surname and date of birth of the worker entered for the professional examination;
(c) a copy of the valid certificate of the natural person;
(d) the scope of the activities to be carried out for which the certificate of specific competence of a cryptographic protection worker is to be issued; and
(e) the place, date, stamp of the applicant, the name and, where applicable, the name, surname and signature of the responsible person of the authority of the State or of the authorised person, or of the legal person or natural person involved.
Organisation, content and method of conducting the professional examination
(K § 39 (1) and (2) of the Act)
(1) The Trial Board is a three-member body and consists of representatives of the National Security Office ("the Office") or an authorised authority of the State which verifies the specific competence.
(2) Only a cryptographic protection worker holding a valid certificate of a natural person may be appointed as a member of the test committee for at least the level of secrecy for which the professional examination is conducted, with a period of experience in cryptographic protection of at least 3 years. At least one of the members of the test committee shall be entitled to prepare a cryptographic protection worker.
(3) The examination committee shall act by a majority vote. The result of the professional examination shall be assessed by the degree "benefit 'or" benefit'. In the event that the worker applied for the professional examination has not benefited, the chairman of the examination committee shall inform the applicant of the reasons for the evaluation.
(4) A report shall be kept on the course of the training and performance of the professional examination. The report on the conduct of the expert examination shall be signed by all members of the examination committee. The time limit for its shredding shall begin to run from the expiry of the certificate of special competence or from the date on which the applicant who did not benefit was informed of the reasons for the assessment.
(5) If part of the professional examination is carried out on the basis of an activity contract pursuant to Paragraph 39 (3) (b) of the Act, that body shall issue a written proof of its outcome.
Requirements for certificates of specific competence
(Paragraph 39 (1) of the Law)
The certificate of specific competence of a cryptographic protection worker shall include:
(a) the registration number of the certificate;
(b) the name and, where appropriate, the name, surname and date of birth of the holder of the certificate;
(c) identification of the certification body by the name of the State authority, its registered office and its identification number;
(d) definition of the scope of professional competence for the performance of cryptographic protection;
(e) the date of issue and the period of validity of the certificate; and
(f) the stamp, the name and, where appropriate, the name, surname and signature of the authorised representative of the certification body.
Application for conclusion of a contract to conduct a professional examination or part thereof
(K § 39 (3) and § 52 of the Act)
The application for the conclusion of a contract to carry out a professional examination and to issue certificates of specific competence of a cryptographic protection worker or to perform part of the professional examination shall contain:
(a) the name of the applicant, the name and, where applicable, the name and surname of the responsible person;
(b) the address of the applicant;
(c) the applicant's identification number, if allocated;
(d) the name and, where appropriate, the name and surname of the contact staff member of the applicant and the contact details thereof;
(e) the definition of the required scope of the professional examination;
(f) evidence of organisational, personnel, technical and material security for carrying out the professional examination or part of the professional examination; and
(g) the name and, where applicable, the name, surname and signature of the applicant's responsible person.
Minimum requirements for ensuring the security management of cryptographic protection
(1) The implementation of measures in the field of personnel, administrative and physical security, the security of information or communication systems in the provision of cryptographic protection shall be regarded as security management of cryptographic protection for the purposes of this Decree.
(2) The security management of the cryptographic protection referred to in paragraph 1 shall be determined by the responsible person or by the authorised person in the authority of the State, with the legal person or the undertaking of the natural person where the exercise of cryptographic protection is carried out.
(3) The security management of cryptographic protection shall:
(a) a cryptographic protection security administrator who is responsible for the comprehensive provision, safe implementation and control of cryptographic protection and for this processing the relevant cryptographic protection security documentation;
(b) the manager of cryptographic material, who is responsible for the safe storage and registration of cryptographic material, administrative aids, personnel records, cryptographic protection, operational operators of cryptographic devices and couriers of cryptographic material; and
(c) a senior staff member who is a senior to a cryptographic protection officer and who is the result of his / her work assignment.
(4) The tasks of AIFMs under paragraph 3 (a) and (b) lay down safety standards [§ 2 (j) of the Act]. Individual activities resulting from the role of the administrator of cryptographic material may be divided between several authorised cryptographic protection personnel.
Details of the operation of the cryptographic device
Installation and operation of cryptographic equipment
(1) The installation of a cryptographic device and the provision of the operation and service of a cryptographic device, the activities directly related to the setting of materials to ensure the functioning of the cryptographic device and the fulfilment of the security measures of the management of the operated cryptographic device are carried out by a specialist operator of the cryptographic device. The requirements for the special operation of the cryptographic device are set out in the Cryptographic device certification report (Section 46 (13) of the Act).
(2) The scope of the authorisation and the activities of the worker of the special operator of the cryptographic device and of the operator of the cryptographic device and its training shall be laid down in the operational documentation of the cryptographic device.
(3) A cryptographic device built into a mobile and spaceable system is secured by physical security measures in accordance with the cryptographic certification report (Section 46 (13) of the Act).
(4) For the purpose of carrying out records of the use of a cryptographic device and material to ensure its function, an operating journal of a cryptographic device, which is a book or a notebook, shall be used.
(5) Paragraph 17 (2) and (5) shall apply mutatis mutandis for the issue and modification of the cryptographic device's operating diary before its entry into use.
(6) The operating log of the cryptographic device shall be marked in an appropriate place with a security level and a registration number. The additional designation of the operational journal of the cryptographic device by the word "KRYPTO 'shall be carried out in accordance with the certification report of the cryptographic device (Section 46 (13) of the Act).
Manufacture and use of materials to ensure the functioning of cryptographic equipment
(1) The method and conditions of manufacture, labelling, handling, setting, use and destruction of the material to ensure the functioning of the cryptographic device are laid down in the operational documentation of the cryptographic device and the safety standards [Section 2 (j) of the Act].
(2) The production of material to ensure the functioning of the cryptographic device must be carried out by an authorised operator of the cryptographic device at the cryptographic site intended for the production of material to ensure the functioning of the cryptographic device. In order to do this, a cryptographic protection worker must hold a valid certificate of the special competence of a cryptographic protection worker, indicating an authorisation to manufacture materials to ensure the functioning of the cryptographic device.
(3) The other necessary means and material to ensure the function and safe operation of the cryptographic device and the requirements for its use shall be determined by the cryptographic certification report.
Training method and model of the certificate of the worker operating the cryptographic device and courier of cryptographic material
Operation of cryptographic device
(1) For the cryptographic device for which the operating operator is required, the security administrator of the cryptographic protection shall provide training for the operator of the operating equipment. Upon completion of the training, the training body shall issue the trained person with a certificate of training for the operator of the cryptographic device.
(2) The model certificate of training the operator of the cryptographic device is set out in Annex 1 to this Decree.
(3) For a cryptographic device which, according to a cryptographic certification report, is simultaneously an end device of a communication or information system and for which the performance of its user functions is part of the end-device operator of a communication or information system user, an operating operator may not be required. Where the requirements for the operation of such a cryptographic device are incorporated into the operational documentation of the communication or information system, the user shall be trained to operate the cryptographic device within that communication or information system.
Cryptographic material courier
(1) The security administrator of cryptographic protection provides training for the courier of cryptographic material. After the training has been completed, the training body shall issue a certificate to the trained person for the training of the courier of cryptographic material. The content of the training of the cryptographic material courier sets out the safety standard [§ 2 (j) of the Act].
(2) The model certificate for the training of the cryptographic material courier is set out in Annex 2 to this Decree.
Details of the means of marking the details of classified information in the field of cryptographic protection
Labelling of cryptographic device and material to ensure the functioning of cryptographic device
(1) The labelling of a cryptographic device is regulated by its certification report.
(2) The material to ensure the functioning of the cryptographic device shall be marked with a classification level; the key material shall be marked "KRYPTO '. The registration number of the material to ensure the functioning of the cryptographic device shall be the registration mark of the material specified by the material manufacturer to ensure the functioning of the cryptographic device.
(3) The material used to ensure the functioning of a cryptographic device operated in an approved testing or training mode shall be marked with a classification level according to the cryptographic certification report, if required, and with the additional word "VICIOUS."
The requirements of the cryptographic document in paper form
(1) The cryptographic document in paper form shall bear the name of the authority of the State or legal person, or the name, or the name and surname of the undertaking of the natural person, the place where the cryptographic document was created and the date of the copy, the reference number of the document, the classification, the word "KRYPTO ', the number of copies, the number of sheets, the number of classified and non-classified annexes in paper form and the number of their sheets.
(2) The number of copies, the number of sheets, the number of classified and non-classified annexes and the number of their sheets shall be indicated on the front of the first sheet on the top right. The term "KRYPTO 'shall be marked in the upper and lower sections on each side of the cryptographic document behind the classification level and in the number of the acronym" K' given for the year of the creation of the cryptographic document and a separate slash. The number of annexes in paper form and the number of their sheets shall be expressed by a fraction, the numerator of which shall be the number of annexes and the denominator of the total number of sheets of annexes. The sheets or pages of the cryptographic document in paper form shall be numbered continuously. The sheets or pages of the classified annexes shall be numbered separately. The sheets of the cryptographic document and the sheets of each classified annex in paper form shall be stapled or otherwise fixed. The model of the front of the first sheet of the cryptographic document is set out in Annex 3 to this decree.
(3) The annex shall be marked with the number of the working cryptographic document by indicating on the front of the first sheet at the top right of the sheet: "Annex No... k....... '. The classification level of each classified annex shall be the same as that of the cryptographic document. The classified annex of the confidential and higher classification level shall bear the name of the authority of the State or legal person, or the name or, where appropriate, the name of the natural person in business with whom the classified Annex has been established. The classified annex shall have its own number and number of sheets. The handling of a cryptographic document containing annexes to different levels of secrecy shall be subject to the highest level of secrecy. The disconnected attachment shall be handled according to its classification level.
(4) The Annex, which has a registration number, is registered on the registration card, in the register book or in other administrative aids as provided for in Article 17. These documents shall be recorded and sent as an annex under the document originator's records. This shall be indicated in the accompanying letter.
Reference cryptographic document number
The reference cryptographic document number shall consist of:
(a) an abbreviation of the classification level;
(b) the order number of the Protocol; in the case of use of a collection sheet, the coupling and the serial number of the collection sheet shall be marked after the order number of the Protocol,
(c) slash,
(d) the year in which the serial number was assigned,
(e) slash and abbreviation "K"; and
(f) other particulars or characteristics established by the authority of the State, by a legal person or by a natural person separated by a link.
Requires cryptographic document in non-paper form
The cryptographic document in non-paper form or on its descriptive label or in any other appropriate way shall bear the designation of the authority of the State, legal person or business natural person, the place where the cryptographic document was created and the date of the preparation, the reference number of the cryptographic document or, where appropriate, the annex to the number of the cryptographic document in paper form, or the registration mark under which the cryptographic document in non-paper form is registered in the administrative documents referred to in Article 17 (1) (a), the degree of secrecy and the word "KRYPTO '.
Means of keeping records
(1) The records of cryptographic material, cryptographic protection workers, operational operators of cryptographic products and couriers of cryptographic material are kept in the administrative aids of cryptographic protection.
(2) The records referred to in paragraph 1 shall be kept by a cryptographic protection officer responsible for such activities or by a person authorised by them (hereinafter referred to as "authorised officer").
Types and formalities of cryptographic protection administrative aids and their management requirements
Administrative aid for cryptographic protection
(1) For the purposes of the recording, transmission, acceptance and recording of movement of cryptographic material, administrative aids, cryptographic protection personnel, operating operators of cryptographic equipment and couriers of cryptographic material, the following clerical protection administrative aids are used
(a) a registration card for the registration of cryptographic devices, materials to ensure the functioning of the cryptographic device, cryptographic protection personnel, operators of the cryptographic device, couriers of cryptographic material and operational documentation;
(b) the register of registration cards for registration cards;
(c) a register for the registration of cryptographic material, administrative aids, operational documentation and auxiliary records;
(d) a protocol for the registration of a cryptographic document; the Protocol contains entries in accordance with the model set out in Annex 1 to the Ordinance governing administrative security and classified information registers;
(e) an auxiliary protocol for recording the movement of a cryptographic document within a State authority, a legal person or an undertaking natural person; the auxiliary protocol shall contain items in accordance with the model set out in Annex 2 to the Ordinance governing administrative security and classified information registers;
(f) the handling book for recording the cryptographic document when receiving and transmitting the document by the person who produces it or who has been transmitted it for processing; The handling book shall include the items in accordance with the model set out in Annex 3 to the Decree governing administrative security and classified information registers,
(g) a delivery book for recording the transmission of a cryptographic document outside the authority of the State, a legal person or an undertaking; the delivery ledger contains items in accordance with the model set out in Annex 4 to the Ordinance governing administrative security and classified information registers;
(h) a lending book for the recording of loans of a stored cryptographic document; the loan book contains items in accordance with the model set out in Annex 5 to the Decree governing administrative security and classified information registers,
(i) a collection sheet for the extension of the record in the Protocol in the case of registration of more than one number of cryptographic documents; the collection sheet shall contain the items in accordance with the model set out in Annex 7 to the Decree governing administrative security and classified information registers; and
(j) a checklist of the cryptographic document from the classification level Confidential including for keeping an overview of persons who have become familiar with the contents of the cryptographic document; the control sheet shall contain the items in accordance with the model set out in Annex 6 to the Decree governing administrative security and the classified information registers.
(2) The administrative aids referred to in paragraph 1 (a) to (c) shall be issued by the Office. In justified cases, an additional administrative aid may be used instead of the aid referred to in points (a) to (c) of paragraph 1, but shall contain all the items of the aid which it replaces. The method of using the aids referred to in this paragraph shall establish safety standards [Paragraph 2 (j) of the Act].
(3) The administrative assistance referred to in point (a) of paragraph 1 shall, before being taken into use, indicate the name of the authority of the State, legal person or natural person undertaking or the stamp of the natural person concerned, the registration number, the date of registration and the signature of the responsible person, or his authorised person or the security director or persons authorised by him. The person in charge of the administrative assistance may not be the same as the person in charge of the signature.
(4) The administrative aids referred to in points (b) to (h) of paragraph 1 must be adjusted before being taken into use by continuously numbering and stitching their leaves. On the inside of the plates, the ends of the stitching shall be glued, the stamp shall be stamped with the name of the authority of the State, the legal person or the natural person involved, exceeding the edge of the gluing, and shall include a clause on the number of sheets and the signature of the person responsible or the authorised person or the security director or persons authorised by him, and the date of secondment to use. The person in charge of the administrative assistance may not be the same as the person in charge of the signature.
(5) The classified administrative aid for cryptographic protection must be classified in an appropriate place, the word "KRYPTO" and the registration number.
(6) The non-classified administrative aid for cryptographic protection must be marked in an appropriate place with the words "KRYPTOGRAPHIC PROTECTION" and the registration number. Only a cryptographic protection worker can become familiar with the content of this administrative aid; an operating operator of a cryptographic device or a courier of cryptographic material may only familiarise himself with its content if it is strictly necessary for the performance of its activities.
Electronic administrative aids
Administrative aids may be kept in electronic form; the method of use and the requirements for the management of these administrative aids set out safety standards [§ 2 (j) of the Act].
Further requirements on the way and means of handling cryptographic material
Registration of cryptographic device and material to ensure its function
The cryptographic device and the material to ensure its function shall be recorded in the records or in the records. The method of their registration sets out safety standards [§ 2 (j) of the Act].
Registration of cryptographic document
(1) A paper-based cryptographic document delivered or emerging shall be recorded in the Protocol of Procedure in accordance with the guidelines set out in Annex No 1 to the Ordinance governing administrative security and the register of classified information, unless otherwise provided for in that Decree. For further manipulation of the cryptographic document, it can be reregistered in the administrative equipment of cryptographic protection for its registration.
(2) The delivered or emerging cryptographic document in non-paper form, bearing the registration number, shall be registered on the registration card, in the register book or in other administrative tools intended for its registration, as the case may be. The method of recording sets out safety standards [§ 2 (j) of the Act].
(3) The cryptographic document delivered is also a cryptographic document which has been taken over by the recipient outside the premises of a State authority, a legal person or an undertaking natural person at an official hearing or in the course of an inspection. For the transmission of this cryptographic document, the conditions laid down for the transmission of cryptographic material (§ 29) shall be fulfilled and, after its transfer, it shall be transmitted without delay to the authorised official for registration.
(4) A paper-based cryptographic document shall bear:
(a) the name of the consignee;
(b) the date of registration;
(c) the number of the beneficiary's reference cryptographic document;
(d) the number of sheets; and
(e) the number of annexes or the number of volumes of annexes and the number of their sheets; for non-paper annexes, their number and species.
These particulars may be stamped.
(5) For the purpose of recording the movement of a cryptographic document for an organisational component which does not conduct a protocol of procedure, a State authority, a legal person, or an undertaking natural person may establish an auxiliary protocol of procedure. The cryptographic document shall be entered in the Assistant Protocol under the assigned serial number of the Protocol.
(6) Whoever produces or has been assigned a cryptographic document for processing records it in the assigned handling book. The record shall be made without delay after the receipt of the cryptographic document or the allocation of the reference number for the emerging cryptographic document. A cryptographic document shall also be recorded in the handling book which has been taken over outside the premises of a State authority, a legal person or an undertaking natural person at an official hearing or at the time of the inspection.
(7) At the end of the calendar year, the Protocol shall be concluded by underlining the whole of the minutes and thus terminating the allocation of the numbers negotiating that year. A record of the number of negotiating numbers used, signed by the authorised staff member and his direct supervisor, shall be entered under the emphasis.
(8) A cryptographic document whose classification level has been changed or the classification level deleted and the designation "KRYPTO" is continued to be recorded in the administrative aids for cryptographic protection referred to in paragraph 1 or 2.
Printing of a cryptographic document in paper form
(1) A copy of the cryptographic document shall be drawn up in the number of copies shown in the distribution box. Those who produce a paper shall immediately destroy defective copies, copies which are not shown in the box and drafts of non-approved copies.
(2) A partition and a record for storage shall be drawn up on the copy of the cryptographic document that is intended for storage. The model of the distribution and storage record is set out in Annex 4 to this decree.
Recording of notes containing classified cryptographic protection information
Notes containing classified cryptographic protection information shall only be recorded on a medium of classified information that has been modified before being taken into use in accordance with Article 17 (5) and (6) or Article 15. The records of the information media issued shall be kept by the authorised officer. A classified information carrier shall be transmitted and stored in a similar manner to a cryptographic document of the same level of secrecy.
Copy, copy, translation and extract
(1) A copy, copy, translation or extract of a cryptographic document of a classified grade of Top Secret or Secret may be made only on the written consent of the originator of the cryptographic document. The written consent shall include the reference number of the cryptographic document, the number of copies, the reason for the copy, the name and, where applicable, the names, the surname and the signature of the person who granted the consent and the date on which the consent was granted. Written consent shall be deposited with the original of the cryptographic document pending its elimination.
(2) A copy, copy, translation or extract from a cryptographic document classified in the Confidential or Reserved State may be made out only with the written consent of the manager referred to in Article 7 (3) (c), as indicated in that document.
(3) The cryptographic document from which the copy, copy, translation or extract is made shall bear the date of the copy, the number of copies, the reason for the copy, the name and, where applicable, the name and surname of the person who gave the consent, the name and, where applicable, the surname and signature of the person who made it.
(4) A copy or a copy of the cryptographic document shall be marked on the upper part of the front of the first sheet with the word "OPIS 'or" COPY' and shall bear the serial number of the copy or a copy of the cryptographic document drawn up. If the number of copy sheets does not agree with the number of original sheets, the actual number of copy sheets shall also be indicated on the copy.
(5) An extract from a cryptographic document containing classified cryptographic protection information shall be made only in the notebook or book or other medium of information referred to in Section 22.
Transmission of cryptographic material
(1) Cryptographic material shall be transmitted against confirmation by signature.
(2) The transmission of a cryptographic device or material to ensure its function within the authority of a State, a legal person, or in the case of an operating natural person, shall be recorded on the record card of the cryptographic material or, where appropriate, in other administrative aids.
(3) The transmission of a cryptographic document within a State authority, a legal person or an undertaking shall take place:
(a) between the organisational components by means of the negotiating protocols;
(b) within an organisational component, by means of an auxiliary protocol, unless it is in place, by means of a protocol, or, after approval by the responsible person or by the Security Director, by means of a handling book, registration card or designated administrative aids as referred to in the second sentence of Article 17 (2).
(4) Signatures confirming receipt of the cryptographic document shall be indicated in the administrative aids or in the division of the cryptographic document.
Transmission of cryptographic material
(1) The cryptographic device is sent in a package enabling its locking or other securing against unauthorised handling of its contents ("transport packaging"). The transport packaging shall bear the consignor, the inscription "OPENING ONLY THE WORKER OF THE KRYPTOGRAPHIC PROTECTION ONLY," the registration mark of the cryptographic device, the address of the addressee and the inscription: "Do not open and forward immediately to the Police Department of the Czech Republic or the National Security Office if found!" The transport packaging must be of such quality as to avoid obtaining information on its contents.
(2) The material to ensure the operation of the cryptographic device is sent in 2 packages as follows:
(a) the consignor, the registration number of the consignment, the classification level at the top right and, for the key material, the name "KRYPTO," the name and full address of the addressee at the bottom, if the consignment is addressed to a natural person, shall also indicate its name and, where applicable, its surname and function. The label shall appear on the packaging "OPEN ONLY BY THE WORKER OF THE CYPRYTOGRAPHIC PROTECTION ONLY '. The packaging shall be secured by sticking adhesive tape over all its connections and bearing the stamp of the authority of the State, of the legal person or of the undertaking natural person and the signature of the authorised official. The stamps and signatures shall be in excess of the adhesive tape. When a transparent adhesive tape is used, the stamps and signatures shall be glued to the tape. The packaging must be of such quality as not to allow information on its contents to be obtained,
(b) the outer packaging is a portable box (§ 31) bearing the address of the consignee and the registration number of the consignment.
(3) The cryptographic document in paper form is sent in 2 envelopes as follows:
(a) the consignor, the full number of the negotiating cryptographic document, the classification level at the top right, the word "KRYPTO" on the inside envelope and the name and full address of the addressee at the bottom, if the consignment is addressed to a natural person, shall also indicate its name and, where applicable, its names, surnames and functions. The envelope shall bear the inscription "OPENED ONLY BY THE WORKER OF KRYPTOGRAPHIC PROTECTION ONLY '. The envelope shall be secured in such a way that all connections of the envelope over the whole length are glued with adhesive tape and stamped by the authority of the State, legal person or business natural person and signed by the authorised official. The stamps and signatures shall be in excess of the adhesive tape. When a transparent adhesive tape is used, the stamps and signatures shall be glued to the tape. The envelope shall be of such quality that the data inside the envelope are not legible,
(b) the outer envelope is a portable box (§ 31) bearing the address of the addressee and the registration number of the consignment or a number consisting of the items referred to in § 14 (b) to (d).
(4) The cryptographic document in non-paper form shall always be sent as an annex to the cryptographic document in paper form, to which the number and type of annexes and, where appropriate, their registration markings shall be indicated.
Sign in for notes, favorites and notifications
Regulation Information
| Citation | Decree No. 432 / 2011 Coll., on ensuring cryptographic protection of classified information |
|---|---|
| Regulation Type | Order |
| Author | - |
| Collection | Code of Laws |
| Date of Promulgation | 28.12.2011 |
|---|---|
| Effective from | 01.01.2012 |
| Effective until | - |
| Status | Valid |
The regulation text is for informational purposes only.
Comments 0