Critical information infrastructure assets

In KUMA, you can tag assets related to the critical information infrastructure (CII) of the Russian Federation. This allows you to restrict the KUMA users capabilities to handle alerts and incidents, which are associated with the assets related to the CII objects.

You can assign the CII category to assets if the license with the GosSOPKA module is active in KUMA.

General administrators and users with the Access to CII facilities check box selected in their profiles can assign the CII category to an asset. If none of these conditions are met, the following restrictions apply to the user:

• The CII category group of settings is not displayed in the Asset details and Edit asset windows. You cannot view or change the CII category of an asset.
• Alerts and incidents associated with the assets of the CII category are not available for viewing. You cannot perform any actions on such alerts and incidents; they are not displayed in the table of alerts and incidents.
• The CII column is not displayed in the alert and incident tables.
• Alerts cannot be searched or closed using the REST API.

The CII category of an asset is displayed in the Asset details window in the CII category group of settings.

To change the CII category of an asset:

1. In the KUMA console, in the Assets section, select the relevant asset.

   The Asset details window opens.

2. Click the Edit button and select one of the available values in the drop-down list:
   • Information resource is not a CII object – default value, indicating that the asset does not have a CII category. The users with the Access to CII facilities check box cleared in their profiles can work with such assets and the alerts and incidents related to these assets.
   • CII object without importance category.
   • CII object of the third importance category.
   • CII object of the second importance category.
   • CII object of the first importance category.
3. Click Save.