Starting January 1, 2026, critical information infrastructure entities in Kazakhstan must connect their event log systems to the national coordinating center. This requirement is mandated by the Republic of Kazakhstan Law No. 256-VIII on Cybersecurity.
Organizations are now required to establish internal security operations centers or engage external providers. Additionally, companies processing state-protected information must conduct annual cybersecurity audits to comply with the new regulatory framework.
The primary focus is on continuous monitoring, which involves collecting data from information systems and implementing response protocols. Organizations may utilize SIEM systems and SOCs to manage these security tasks effectively.
Companies lacking internal security teams have the option to outsource functions to Managed Security Service Providers. These contractors must ensure full compatibility with the client's infrastructure and meet strict data transmission and audit standards.
According to Softline, the regulatory changes create a long-term demand for comprehensive security projects. Providers capable of integrating SIEM and SOC solutions while offering ongoing support and regulatory compliance will be the most competitive in the market.
