LEGAL REGULATION OF CYBERSECURITY IN THE CONTEXT OF CRITICAL INFRASTRUCTURE PROTECTION

Abstract

The article analyses the study of ensuring cybersecurity of critical infrastructure (hereinafter – CI), which is one of the most important challenges for today. Cyberattacks on critical infrastructure facilities can have devastating consequences for national security, the economy and society. Given the growing number and sophistication of cyber threats, effective legal regulation in this area is of particular importance. Objective. To provide a comprehensive analysis of the national legal regulation of cybersecurity in terms of critical infrastructure protection, to identify problems in the current legislation and to provide specific recommendations for its improvement, taking into account current challenges and international experience. To achieve this goal, the following set of scientific methods was used In particular, the analysis and synthesis of legal acts, the texts of laws, strategies and standards in the field of cybersecurity and information security protection were analysed. Scientific novelty. a comprehensive analysis of the legal regulation of critical infrastructure cybersecurity in Ukraine, taking into account, in particular, the current challenges caused by the armed attack of the Russian Federation and international experience, and identifies a number of problems in the current legislation. Some key terms are not clearly defined, which complicates law enforcement, that there are problems with coordination between different government agencies responsible for cybersecurity of information and communications, and that existing mechanisms for monitoring compliance with the law are ineffective. Improving the effectiveness of protecting critical infrastructure against cyber threats, and considering the need to differentiate regulatory approaches according to the criticality of the facility. Conclusions. This study has made it possible to draw a number of important conclusions about the current state of legal regulation of critical infrastructure cybersecurity in Ukraine and to identify the main areas for its improvement. In particular, it is necessary to clarify the terminology, optimise the distribution of powers between public authorities, strengthen cybersecurity requirements and increase liability for violations. Implementation of the proposed measures will increase the level of protection of Ukraine’s critical infrastructure from cyber threats.