CDC · Standards

The standards that shape the industry.

The institute runs the secretariat of standardisation technical committee TC-34: it analyses ISO, NIST and ETSI, adapts international practice to the requirements of Kazakhstan and puts drafts out for public consultation.

In force

National standards

Official titles of standards are quoted verbatim and are not subject to terminology replacement, even where they contain the earlier wording.

ST RK ISO/IEC 27002-2023 Information security, cybersecurity and privacy protection. Information security controls In force
ST RK ISO/IEC 27005-2022 Information technology. Security techniques. Information security risk management In force
Draft · PQ crypto Post-quantum cryptographic algorithms. Requirements and rules of application In development
Draft · IoT Cybersecurity requirements for Internet of Things devices In development

The full list of standards in force is maintained by KazStandard. The institute’s own registries and lists are in a separate section.

Перечень

Стандарты СТ РК: ИИ, кибербезопасность, биометрия

Сводный перечень национальных стандартов по искусственному интеллекту, информационной безопасности и биометрии — с международными аналогами, статусами и ссылками на стандарты ISO. Поиск по обозначению, наименованию или аналогу, фильтр по направлению.

Загрузка перечня…
Relationship graph

Standards and regulations on one map

The interactive graph shows how information security standards relate to the laws and regulations of the Republic of Kazakhstan: which international standard a national ST RK standard is based on, which act made it mandatory, which editions replaced it and where national standards have no counterpart. Documents can be searched by designation and filtered by security domain, status and regulation. The graph interface is in Russian.

About the committee

How TC-34 works

  1. 01

    Reviewing international practice

    Study of current ISO/IEC, NIST and ETSI editions and assessment of how they apply to Kazakhstani regulation and digital infrastructure.

  2. 02

    Drafting

    Preparing the first edition in line with the Digital Code and sector specifics. Terminology is aligned with the current wording of the law.

  3. 03

    Public consultation

    The draft is opened for comment. Remarks are accepted from any interested party and receive a substantive reply.

  4. 04

    Approval and publication

    After revision the standard is submitted for approval and entered into the KazStandard register.

The committee’s official name in the KazStandard register is standardisation technical committee No. 34 “Information Technology”. The short form “TC-34” is used across this site.

Open consultation

Comments on draft standards

If you see an inaccuracy in a draft, a conflict with current rules or a requirement that cannot be met in practice — write to us. Every remark is logged and answered.