CDC · Assessment

We check you before the regulator does.

Review of technical specifications, compliance audits, personal data protection and expert opinions for government bodies and owners of CDA.

Services

What we do

Technical specification review

Review of technical specifications: whether requirements are justified, complete and consistent with current standards.

Compliance audit

Checking digital systems and processes against cybersecurity requirements and the Digital Code.

Personal data protection

Legal grounds for processing, retention periods, exercise of data subject rights, readiness to notify of a breach.

Expert opinions

Opinions for the national research council and government clients.

Tool

Information security incident damage assessment

A calculator based on the 2026 methodology: direct, indirect and strategic losses in tenge, annualised loss expectancy and return on security investment (ALE/ROSI), the NSI, GSCI, TSI and HSI impact indices and the composite CII index for critical information infrastructure and state information systems. Calculations run in your browser; no data is sent anywhere. The calculator is in Russian.

Process

How it works

  1. 01

    Request

    Describe the system and the task using the enquiry form. The enquiry is logged in the system.

  2. 02

    Initial assessment

    We define the scope of work, the expert team and the timeline.

  3. 03

    The work

    Documentation review and, where necessary, hands-on testing.

  4. 04

    Opinion

    A document with findings and a list of remarks and, if needed, a re-check after they are addressed.

Questions about certification of CDA are answered in a separate FAQ.