The
Information Network Security Administration (INSA) was first established in
2007 by the Council of Ministers Regulation No. 130/2007 with the aim of
protecting our country's information and information infrastructures from
attacks and safeguarding national interests. Our goal is to build the capacity
to ensure the security of the country's information and information
infrastructure, thereby protecting national interests and realizing a national
capacity that can ensure information superiority.
Regulatory and Monitoring Work
Prepares and
directs the national policy, law, standard and strategy drafts that ensure the
security of key infrastructures based on information and computers; monitors
their implementation upon approval; supervises;
Controls the
production and circulation of cryptographic graphics; establishes a system of
use by issuing the necessary criteria, develops cryptographic infrastructure;
Serves as the national root certification authority.
Ensures that
government and private institutions formulate and implement their own policies
and standards in accordance with the national information security policy and
standard frameworks; supervises their implementation.
Coordinate with relevant bodies to monitor the
entry and exit of information technologies, information sensors and attack
technologies into and out of the country in order to prevent threats to
national security.
Design
and provide educational and training programs on the security of information or
computer-based infrastructures through its own training center or in
collaboration with others.
Development and enhancement of
Development and
deployment of research-based information and computer-based key infrastructure
security products and services.
Establishment of
information management infrastructures and systems to ensure the cyber security
of key infrastructures.
Provision of
security products and services to foreign partner countries in accordance with
government decisions.
Provision of
secure information management infrastructures and systems in gaps where
national capacity is not available.
Operational
Tasks
Establish a National Computer Emergency Response Center;
take necessary countermeasures to prevent cyber and electromagnetic attacks on information and computer-based key infrastructures or systems or on the psyche of citizens.
To conduct security audits of information and computer-based key infrastructures at any time, to notify non-compliant infrastructures of corrective actions that will adequately protect their systems from cyber attacks, and to monitor their implementation; To issue security competency certificates to institutions that meet the criteria or to authorize other institutions to perform these functions;
Establish a laboratory center for information technology security testing and evaluation.
Cooperate and support the police and other legally authorized bodies in the prevention and investigation of cybercrime.