Saatja: Madis Tapupere </o=JM/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=a6d3c2b44cda41f7bd3e712b7a547af6-Madis Tapupere>
Saaja: 'Pasha Podolyanko'
Teema: RE: Inquiry Regarding Government-Run Code Certification Programs in Estonia
Dear Sir
In response to your enquiry I’d like to state that at the moment there is no one centrally offered ceritification programme for software code in Estonian public sector. Due to the distrubuted nature of the public sector and the IT organizations serving them, the responsibility for the corresponding quality verification also reside there,
Having said that, there are a number of high level requrements and best practices:
1. governmental cross functional requirements ( e-gov / cfr · GitLab (eesti.ee) <https://koodivaramu.eesti.ee/e-gov/cfr> )
2. multifunctional requirements document from State Information Agency RIA ( https://e-gov.github.io/MFN/ )
3. the above both require pentesting, which for which there is some capacity in RIA but also private sector services are extensively used
4. our Estonian Information Security Standard E-ITS has modules for testing and implementation of software ( https://eits.ria.ee/et/versioon/2023/eits-poohidokumendid/etalonturbe-kataloog/ops-kaeidutoeoed/ops1-oma-kaeidutoeoed/ops11-itpoohitoeoed/ops116-tarkvara-testimine-ja-kasutuselevoott/3-meetmed
)
5. There are also some broader developments, including scientific cooperation between Tartu University and Czhech universities and upcomimg CRA directive, driven by ENISA
Hope the answer is of help to you
Madis Tapupere
Madis Tapupere
Tehnoloogiate juht
Digiriigi arengu osakond
Digiarengu asekantsleri valdkond
Majandus- ja Kommunikatsiooniministeerium
+ 372 5087895|
[email protected] <mailto:
[email protected]>
www.mkm.ee <http://www.mkm.ee/> | Suur-Ameerika 1, Tallinn
From: Pasha Podolyanko <
[email protected]>
Sent: Tuesday, February 13, 2024 2:19 PM
To: MKM info
Subject: Inquiry Regarding Government-Run Code Certification Programs in Estonia
Tähelepanu! Tegemist on välisvõrgust saabunud kirjaga.
Tundmatu saatja korral palume linke ja faile mitte avada.
Dear Estonian Ministry of Economic Affairs and Communications,
I am writing to inquire about the existence of any government-run code certification programs in Estonia. As the CEO of UAWTA OU, I am deeply interested in understanding the digital infrastructure and regulatory landscape surrounding software development in your country.
I have been researching potential code certification programs for AI algorithms and have not found any clear information on government-backed initiatives in this area. Therefore, I would be grateful if you could provide me with insights on the following:
* Does the Estonian government currently offer any programs for officially certifying the quality, security, or functionality of software code?
* If such programs exist, could you please provide details on their objectives, scope, and eligibility criteria?
* If no government-run programs are available, are there any other recognized institutions or organizations in Estonia that offer code certification services?
I understand that your Ministry plays a crucial role in fostering Estonia's digital economy and innovation. Any information you could provide about code certification programs, or the absence thereof, would be highly valuable to my startup.
Thank you for your time and consideration. I look forward to hearing from you soon.
Sincerely,
Pasha Podolianko