New Cybersecurity Framework Established in Ukraine

The President of Ukraine, Volodymyr Zelensky, has enacted the law "On the Protection of Information and Cybersecurity of State Information Resources" (No. 4336-IX). A key component of this law is the establishment of a national response system for cyberattacks, incidents, and threats.

This information was shared via the official Telegram channel of the Verkhovna Rada.

Creation of a National Cyber Response System in Ukraine

According to the parliamentary announcement, the enacted law includes provisions for:

• the establishment of a national system to respond to cyber incidents, attacks, and threats;
• the operation of a national information exchange system regarding relevant threats;
• the introduction of cybersecurity specialists in government bodies and critical infrastructure facilities.

The responsibility for the functioning of the national response system is assigned to the State Service of Special Communications and Information Protection of Ukraine.

This national system will incorporate the government team CERT-UA for responding to computer emergencies, as well as various sectoral and regional cybersecurity incident response teams formed by state or local authorities.

Moreover, the law standardizes approaches to cryptographic and technical information protection, cybersecurity measures, and counteracting technical espionage. A system for assessing the state of cybersecurity in the country is also being introduced.

The Verkhovna Rada previously passed the law aimed at protecting state resources from cyberattacks, aligning with EU and NATO standards.

This legislative move comes amid a significant increase in cyberattacks aimed at local authorities, government institutions, the defense sector, energy, telecommunications, and businesses. The most common threats include viruses, phishing, and unauthorized access.

Recently, a technical failure occurred in the Ukrzaliznytsia system.

This disruption resulted in the offline status of online services, including the temporary unavailability of ticket sales through the application and website.