Dossier for a Civil Cryptography Business License

What does the dossier for applying for a License to trade civil cryptography products and services include? Where is the dossier submitted?

1. What are civil cryptography products and services?

Under Article 30 of the Law on Network Information Security 2015 on civil cryptography products and services:

“1. Civil cryptography products are documents, technical equipment and cryptographic professional tools for protecting information not falling within the scope of state secrets.

2. Civil cryptography services include information protection services using civil cryptography products; inspection and assessment of civil cryptography products; consulting on confidentiality and cybersecurity using civil cryptography products.”

2. Where is the dossier for applying for a License to trade civil cryptography products and services submitted? What does the dossier include?

Under Article 32 of the Law on Network Information Security 2015 on the order and procedures for applying for a License to trade civil cryptography products and services:

“1. An enterprise applying for a License to trade civil cryptography products and services submits its application dossier at the Government Cipher Committee.

2. The application dossier for a License to trade civil cryptography products and services is made in two sets, comprising:

a) Application for a License to trade civil cryptography products and services;

b) Copies of the Enterprise Registration Certificate or Investment Registration Certificate or other documents of equivalent value;

c) Copies of professional diplomas or certificates on confidentiality and information security of the management, executive and technical personnel;

d) Technical plan including documents on technical characteristics and parameters of products; technical standards and regulations of products; service standards and quality; technical measures and solutions; product warranty and maintenance plans;

dd) Confidentiality and cybersecurity plan in the process of managing and providing civil cryptography products and services;

e) Business plan including scope, target recipients, scale of product quantity, services, customer service system and technical assurance.

3. Within 30 days from the date of receiving a complete dossier, the Government Cipher Committee appraises and grants the License to trade civil cryptography products and services; in case of refusal, it must notify in writing and state the reasons.

4. A License to trade civil cryptography products and services has a term of 10 years.”

Accordingly, the enterprise submits the application dossier at the Government Cipher Committee.

The application dossier for a License to trade civil cryptography products and services is made in two sets as specifically provided above by the cybersecurity law.