In 2025, the Committee for Technical Regulation and Metrology of the Ministry of Technical Infrastructure of the Republic of Kazakhstan approved four new national standards that strengthen the protection of data, government information systems, and the country's digital infrastructure.

- ST RK 1073-2025 "Means of Cryptographic Information Protection. Requirements for Information Security and Lifecycle Processes." This standard replaces ST RK 1073-2007;

- ST RK 4009-2025 "Information Technology. Cryptographic Information Protection. Block Symmetric Encryption Algorithm";

- ST RK ISO/IEC 15408-4-2025 "Information Security, Cybersecurity, and Privacy Protection. Information Technology Security Evaluation Criteria. Part 4. Framework for Specification of Evaluation Methods and Activities";

- ST RK ISO/IEC 15408-5-2025 "Information Security, Cybersecurity, and Privacy Protection." Information Technology Security Assessment Criteria. Part 5. Predefined Security Requirements Packages."

Two of these standards define how the country should use its own encryption tools to protect information, ensuring that data remains confidential, unaltered, and protected from unauthorized access. The other two standards establish clear and uniform rules for assessing the security of information systems, including government systems and those handling classified information.

The new standards establish a common and transparent approach to information security, from the use of encryption to assessing the reliability of information systems at all stages of their operation.

As a result, Kazakhstan is strengthening its digital resilience, protecting critical information, and taking an important step toward technological and cryptographic independence. The application of national standards will ensure Kazakhstan's technical, technological, and cryptographic independence, minimizing threats from foreign solutions to protected information.

Source : https://www.gov.kz/memleket/entities/mti-ktrm/press/news/details/1147770?lang=kk