ISVS – Long-term management

Under ISVS provisions, public administration bodies are required to create and publish an information concept, apply it in practice and carry out assessments of compliance with it. In this information concept, public administration bodies set their long-term goals for the quality management and security of ISVS administered, as well as set out general principles for the establishment, preparation and operation of ISVS.

Based on the published information concept, public administration bodies prepare and publish technical documentation for individual ISVS, apply it in practice and assess compliance with it at least once every two years, as well as implement essential modifications and remedial measures, if required.

Separate technical documentation must be created for each ISVS operated by a public administration body based on and in accordance with the information concept.

Public administration bodies must demonstrate fulfilment of the above obligations through certification of long-term ISVS management.