ADEL member obligations¶
The obligations of an ADEL member are set out in the Government Decision N 767-Ն of May 27, 2026.
An ADEL member may delegate the performance of obligations to third parties, but it must not be forgotten that even in this case, the ADEL member remains responsible for their performance. For example, in the case of a hosted security server, the host handles the tasks related to the security server, but in the context of ADEL, the company itself is responsible for the performance of these tasks.
ADEL members commit to keeping their information systems up-to-date and reliable¶
-
Upon joining ADEL, ensure the continuity, management and development of its information system, as well as its secure and uninterrupted operation, so that other members can reliably exchange data with it․
-
To carry out orders transmitted from the ADEL to the ADEL member regarding the use of ADEL.
-
Keep your personal data up to date in the Adel self-service environment.
-
Submit ADEL-related applications and other information to the ADEL via the ADEL self-service environment. Applications and notifications that cannot be submitted via the self-service environment will be submitted electronically.
-
The implementation of the information system outside the territory of the Republic of Armenia must be coordinated with the ADEL.
ADEL members commit to keeping their information systems secure¶
-
Implement data protection measures and appropriate physical, organizational and IT security measures, taking into account the RA Law on Public Information. To address security-related risks, measures must be implemented to ensure the integrity, confidentiality and availability of data.
-
Upon joining, confirm compliance with information security requirements with an appropriate confirmation letter.
-
Provide, at the request of the ADEL, the information necessary to assess the security of the security server, including security rules and a description of the implementation of the measures implemented.
Public sector institutions that are not subject to the RA Law on Public Information may have special regulations in another law that regulates the methods of ensuring information security of their information systems. For example, the State Secrets and Classified Foreign Information Act.
-
Provide and use data services in accordance with the data service usage agreements between ADEL members. The data service usage agreement must specify, among other things:
-
Information security measures necessary for the use of the data service and the organizational, physical and information technology security measures required from the subsystem of the data service user, taking into account the composition of the data to be processed and the requirements of the legislation.
-
Permission to broker data services to third parties if the ADEL member is engaged in brokering data services. When using a data service broker, a service brokering policy must be agreed upon.
-
Service level conditions.
-
Determine the jobs and positions that have the right to use the subsystem and thereby the data services provided to the subsystem, and allow access within the organization only to authorized persons.
-
Immediately inform the ADEL of any problems and circumstances in the use of ADEL that affect or may affect the ADEL or the ADEL member in the performance of their obligations. Among other things, the ADEL member is obliged to immediately inform ADEL of security incidents and their immediate threat.
-
When using a public cloud service to host an information system, it is recommended to follow the guidelines for the secure use of public cloud services.
To ensure that data services are available to all ADEL members, they commit to:¶
-
Register the data service with its technical description on the security server and keep the data service descriptions relevant and up-to-date both on the security server and in the ADEL self-service environment.
-
Before entering into an agreement with a data service user, ensure that the data service user uses adequate organizational, physical and IT security measures, including taking into account the differences arising from the members of the connected environments and the legal form of the member.
-
Ensure that the access rights of the ADEL system are consistent with the agreements between members on the use of the data service. The use of the data service is possible in the subsystems of ADEL members that have been granted access rights to use a specific data service.
-
Comply with the data service usage agreement.
-
Timestamp received messages at the speed necessary for data processing on the security server.