3. Charter

3.1 Mission Statement

Kosovo Government CERT (GovCERT XK) plays a key role in safeguarding the information systems, electronic communication networks and services of Kosovo government institutions. Its goal is to help constituents effectively face cyber security challenges, and to coordinate the prevention, detection, and resolution of security incidents.

3.2 Constituency

GovCERT XK provides cybersecurity incident response, coordination, prevention, and advisory services to central government institutions, government agencies, and other public sector entities operating under the Government of the Republic of Kosovo. The constituency includes government information systems, networks, and critical digital services under its mandate, including but not limited to:

3.3 Sponsorship and/or Affiliation

GovCERT XK is a functional unit of the Agency for Information Society (ASHI), established on 14 February 2019. The Agency for Information Society itself was established under Law No. 04/L-145 on Government Bodies for the Information Society (published 15 May 2013).

3.4 Authority

GovCERT XK operates under the authority delegated to it by the Government of the Republic of Kosovo, and within the bounds of applicable Kosovo legislation, in particular:

• Law No. 08/L-173 on Cyber Security (published 27 February 2023, Official Gazette No. 4/2023);
• Law No. 04/L-145 on Government Bodies for the Information Society (published 15 May 2013, Official Gazette No. 15/2013).

GovCERT XK expects to work cooperatively with system administrators and users within its constituency, and does not exercise authority beyond its constituency.