📋 Tender Overview
Todays government regulation established a new Estonian information security standard E-ITS which is based on risk management and helps determine the best protection measures for information systems. It is a set of requirements and best international practices which is like a ruler to measure and manage ICT security activities.According to Kristjan Jrvan Minister of Business and Information Technology the focus of the new information security standard is on the organization and its needs. E-ITS is a tool created for both the private and public sector which helps to ensure that the information security of all organizations that are important for the functioning of society is at a reasonable level. We encourage all companies to use it because ensuring cyber security is an integral part of the business process. Changes occur very quickly in cyberspace and the new information security standard can also be successfully applied as a process management tool that increases the organizations resistance to cyber threats said Jrvan.He added that every top manager is responsible for the security and continuity of their organizations data and information systems which means investing in cyber security. Managers are interested in how to direct resources as efficiently as possible and the new information security standard also helps make sense of this process. E-ITS is an easy-to-use free tool in Estonian that helps institutions achieve the level of information security that suits their business needs. It helps to spot opportunities and bottlenecks and promotes broad-based cyber security the minister noted.Jrvan emphasized that E-ITS was created by experts in the Estonian cyber field with the needs of organizations operating in Estonia in mind and here. It contains hundreds of different measures that serve as guidelines for improving an organizations cybersecurity. Implementation of E-ITS increases trust in Estonias digital state and providers of vital and important services. The more efficiently we can implement the new information security standard the more reliably we can deal with the unexpected said the minister.The threat picture in Estonian cyberspace is one that definitely requires attention and readiness for a quick response confirmed RIA Deputy Director General Gert Auvrt. In his opinion considering the military activities in Ukraine the situation will not get any calmer in the near future rather more challenges are ahead. During the year attempts to find weaknesses in the network and information systems of our companies and institutions have increased. There has also been an increase in jamming attacks on websites and services since the spring. Although so far targeted attacks by cybercriminals or various groups have not resulted in major service interruptions we must not lose our vigilance. Every service provider and website owner must take care of the security of network and information systems as the functioning of our digital economy depends on them said Auvrt. He added that the new standard is a necessary and useful tool for mapping these risks and increasing the level of security.There are three years for the implementation of E-ITS and the transition to it. E-ITS is available free of charge to everyone at eits.ria.ee. The E-ITS text is updated every year and RIA is waiting for feedback and input to the address standard@ria.ee .The obligation to comply with E-ITS including the obligation to audit applies to the entire area of application of KTS. As an exception E-ITS compliance auditing is not mandatoryfor a micro-entrepreneur in the private sectorin the public sector to a state museum a museum of a public entity a municipality or city authority an institution managed by a municipality or city authority a sub-municipality or a district authority an institution managed by a sub-municipality or a district authority and a joint office and institution of local government unitsfor those who have done ISOIEC 27001.
