Sign in

DSTU ISO/IEC 27001

DSTU ISO/IEC 27001:2023 Ukrainian National Standard — SE "UkrNDNC" (Ministry of Economy of Ukraine)

Also known as: ДСТУ ISO/IEC 27001:2023, ДСТУ ISO 27001, ДСТУ 27001

Official site Official change log Subscribe to DSTU ISO/IEC 27001 (RSS)

This is a paid standard. We publish the fact of a change, its version and date, and a link to the publisher — the text itself is not reproduced.

Current version
DSTU ISO/IEC 27001:2023 (ISO/IEC 27001:2022, IDT)
Published 22 August 2023. source
Status
In force
Next deadline
None announced
Who must comply
Organisations establishing an information security management system (the standard sets ISMS requirements); the National Bank's 2025 regulation for non-bank financial providers refers to this standard. source source
How it is assessed
Conformity to an information security standard is certified by accredited conformity assessment bodies, a route the Law on Protection of Information recognises for public-sector systems. source
Written by
Adopted by SE "UkrNDNC", the national standardization body, by Order No. 210 of 17 August 2023 (as amended by Order No. 223 of 28 August 2023). source
Enforced by
Obligations arise where a regulation requires the standard, such as the National Bank's inspection of bank ISMS under Regulation No. 95. source
Last change
None recorded yet

Ukrainian national adoption of ISO/IEC 27001, designated DSTU ISO/IEC 27001. The text is paywalled; adoption and withdrawal are recorded in the public catalogue of the UkrNDNC National Fund of Regulatory Documents.

Recent changes

No changes recorded yet — we are watching, and nothing has been published.

Key dates

No upcoming dates
  1. DSTU EN ISO/IEC 27001:2022, a separate adoption of EN ISO/IEC 27001:2017 (ISO/IEC 27001:2013), comes into force alongside DSTU ISO/IEC 27001:2023
  2. DSTU ISO/IEC 27001:2023 comes into force and DSTU ISO/IEC 27001:2015 is withdrawn

Version history

  1. DSTU ISO/IEC 27001:2023 (ISO/IEC 27001:2022, IDT) Major versionCurrent

    Identical adoption of ISO/IEC 27001:2022, adopted by endorsement in English; it replaced DSTU ISO/IEC 27001:2015 and its Amendment No. 2:2019. source

  2. DSTU ISO/IEC 27001:2015 Amendment No. 2:2019 (ISO/IEC 27001:2013/Cor 2:2015, IDT) Errata

    Adopted Corrigendum 2:2015 of ISO/IEC 27001:2013 (Order No. 312 of 16 October 2019); withdrawn on 22 August 2023. source

  3. DSTU ISO/IEC 27001:2015 (ISO/IEC 27001:2013; Cor 1:2014, IDT) Major version

    Adopted by Order No. 193 of 18 December 2015 as a translation of ISO/IEC 27001:2013 with Cor 1:2014; withdrawn on 22 August 2023 by Order No. 210. source

  4. DSTU ISO/IEC 27001:2014 Major version

    Adopted by endorsement by Order No. 1494 of 30 December 2014; withdrawn from 1 January 2022 by Order No. 443 of 18 November 2021. source

  5. DSTU ISO/IEC 27001:2010 Major version

    Adopted by Order No. 631 of 28 December 2010 as a translation; withdrawn from 1 July 2017. source

Who it applies to

Ukrainian regulation refers to the national ISO/IEC 27001 adoptions: the National Bank's 2025 regulation names this edition, and its 2017 bank regulation still names the withdrawn 2015 one.

NBU Regulation 143
The National Bank's Regulation No. 143 for non-bank financial service providers was developed taking into account DSTU ISO/IEC 27001:2023 and DSTU ISO/IEC 27002:2023 (point 1). source
NBU Regulation 95
The National Bank's Regulation No. 95 requires banks to implement an ISMS under DSTU ISO/IEC 27001:2015 (point 8). source
Parallel EN adoption
DSTU EN ISO/IEC 27001:2022, which carries ISO/IEC 27001:2013 via EN ISO/IEC 27001:2017, is also listed as in force from 31 December 2023 (Order No. 285 of 28 December 2022). source

How compliance is assessed

Conformity to an information security standard is certified by accredited conformity assessment bodies, a route the Law on Protection of Information recognises for public-sector systems.

Certificate route
Public-sector systems may process state information resources under a certificate of conformity to an information security standard issued by an accredited conformity assessment body, as an alternative to security authorization (Law No. 80/94-VR, Article 8). source

Enforcement and penalties

Obligations arise where a regulation requires the standard, such as the National Bank's inspection of bank ISMS under Regulation No. 95.

Via regulation
Under Regulation No. 95, the National Bank may check a bank's ISMS implementation and the completeness of its security measures (point 13). source

Documents

  1. Standard ДСТУ ISO/IEC 27001:2023 — catalogue record
  2. Standard ДСТУ EN ISO/IEC 27001:2022 — catalogue record
  3. Standard ДСТУ ISO/IEC 27001:2015 (withdrawn) — catalogue record

Verified against official sources on 18 October 2026. We monitor the official sources for this framework. Watching since 24 September 2026. Subscribe to DSTU ISO/IEC 27001 (RSS)