Developing and assessing security profiles of information systems

---

Legal Solutions provides comprehensive cyber security services in accordance with the latest changes in Ukrainian legislation and regulations of the State Special Communications Service.

Relevance of the service

On March 27, 2025, the Verkhovna Rada adopted Law No. 11290, and the President of Ukraine signed Law No. 4336-IX, which tightened the requirements for cyber protection of state information resources and critical information infrastructure facilities (CII).
The new rules provide for:

• the creation of a unified system for responding to cyberattacks;

• introducing positions responsible for cybersecurity;

• mandatory authorization of systems and confirmation of their compliance with security requirements;

• development and implementation of basic and These requirements apply not only to government agencies, but also to enterprises and organizations working with state secrets, confidential or official information.

  What we do

  The company Legal Solutions specializes in:

  • Developing basic security profiles approved by the State Special Communications Service;

  • Creating target security profiles (TSP) for systems that process open, confidential, or official information;

  • Assessing security profiles and providing official conclusions;

  • Preparing recommendations in accordance with the standards NIST 800-171 (at the customer's request).

  Legislative framework

  Our services comply with:

  • The Law of Ukraine “On the Protection of Information in Information and Communication Systems”;

  • The Law of Ukraine “On Information”;

  • Resolution of the Cabinet of Ministers of Ukraine No. 712 dated June 18, 2025;

  • Orders of the State Special Communications Administration No. 409 dated June 30, 2025, and No. 419 dated July 2, 2025;

  • ND TZI 3.6.-006-24.

  Who is this service for?

  • State and local government authorities;

  • State-owned enterprises and institutions;

  • Operators and owners of OKII;

  • Private companies working with confidential or proprietary information (e.g., personal data, trade secrets, internal documentation).

  How it works

  1. You specify what type of information your system processes (public, confidential, internal).

  2. Our specialists prepare an appropriate security profile (based on the basic profile or with additional measures from international standards).

  3. A certified assessor checks the profile and prepares an official conclusion.

  4. You receive documentary confirmation of compliance with legal requirements and readiness for inspections.

  Why Legal Solutions

  • Turnkey, with no extra hassle for you. We take on the whole task: documents, filings, authorities, official queries. You make decisions and sign; we do the rest and contact you only when it matters.
  • We take on the bureaucracy for you. Refusals, queries, delays: we respond, revise and appeal at no extra charge until the matter is closed.
  • One person in charge, start to finish. The same person runs your matter even when the process takes months. You always know who is responsible and where things stand.
  • A boutique, involved in every case. An experienced specialist handles your matter personally, backed by the group's 14 years of practice in 50+ countries. Non-standard matters are our field: where you have been told it cannot be done, we look for a lawful way.
  • Confidentiality written into the contract. Information about you, your company and your deals stays between us; competitors and third parties will not get it. We disclose only what the law or the procedure requires.
  • Faster and cleaner, first time. Full involvement and an individual approach to every matter keep things moving faster and cleaner. Fourteen years of practice let us get right the first time what takes some firms three attempts.

   

---