Developing and assessing security profiles of information systems

---

Legal Solutions provides comprehensive cyber security services in accordance with the latest changes in Ukrainian legislation and regulations of the State Special Communications Service.

Relevance of the service

On March 27, 2025, the Verkhovna Rada adopted Law No. 11290, and the President of Ukraine signed Law No. 4336-IX, which tightened the requirements for cyber protection of state information resources and critical information infrastructure facilities (CII).
The new rules provide for:

• the creation of a unified system for responding to cyberattacks;

• introducing positions responsible for cybersecurity;

• mandatory authorization of systems and confirmation of their compliance with security requirements;

• development and implementation of basic and These requirements apply not only to government agencies, but also to enterprises and organizations working with state secrets, confidential or official information.

  What we do

  The company Legal Solutions specializes in:

  • Developing basic security profiles approved by the State Special Communications Service;

  • Creating target security profiles (TSP) for systems that process open, confidential, or official information;

  • Assessing security profiles and providing official conclusions;

  • Preparing recommendations in accordance with the standards NIST 800-171 (at the customer's request).

  Legislative framework

  Our services comply with:

  • The Law of Ukraine “On the Protection of Information in Information and Communication Systems”;

  • The Law of Ukraine “On Information”;

  • Resolution of the Cabinet of Ministers of Ukraine No. 712 dated June 18, 2025;

  • Orders of the State Special Communications Administration No. 409 dated June 30, 2025, and No. 419 dated July 2, 2025;

  • ND TZI 3.6.-006-24.

  Who is this service for?

  • State and local government authorities;

  • State-owned enterprises and institutions;

  • Operators and owners of OKII;

  • Private companies working with confidential or proprietary information (e.g., personal data, trade secrets, internal documentation).

  How it works

  1. You specify what type of information your system processes (public, confidential, internal).

  2. Our specialists prepare an appropriate security profile (based on the basic profile or with additional measures from international standards).

  3. A certified assessor checks the profile and prepares an official conclusion.

  4. You receive documentary confirmation of compliance with legal requirements and readiness for inspections.

  Why Legal Solutions

  • We are among the first in Ukraine to implement new cyber security requirements;

  • Our specialists have experience working with government and private entities;

  • We provide a comprehensive approach: from analysis to approval and support of the security profile.

   

---