New obligations in the field of cybersecurity have been established for owners of internet information resources in Azerbaijan. According to the Operative Information Center-OMM, these changes are reflected in the amendments to the Law "On Information, Informatization and Protection of Information," signed by President Ilham Aliyev.
The updated legislation introduces several key definitions to the legal framework, including information infrastructure, cybersecurity, cyberspace, cyber hygiene, digital evidence, digital forensics, Computer Emergency Response Team (CERT), Security Operations Center (SOC), National CERT, and Government CERT. These additions aim to modernize the regulatory environment in line with global digital security standards.
The law delineates the rights and responsibilities of state bodies, information infrastructure subjects, and CERT/SOC entities. It establishes mechanisms for the detection, prevention, investigation, and mitigation of cyber threats, cyberattacks, and cyber incidents. Furthermore, the document mandates provisions for monitoring and auditing cybersecurity, facilitating information exchange regarding cyber incidents, conducting digital forensics, and implementing a regulatory test environment for digital development projects and solutions.
Additionally, the legislation imposes new cybersecurity obligations on information infrastructure subjects, internet service providers, host providers, and owners of internet information resources, while expanding the operational scope and authority of the National CERT.
In accordance with the presidential decree regarding the implementation of this law, the State Security Service (SSS) and the State Service for Special Communication and Information Security have been tasked with establishing a registry for CERTs and SOCs. The Central Bank of Azerbaijan has also been advised to participate in this process, with a one-year timeframe set for completing these measures and reporting back to the President.
This legislative update represents a significant step in Azerbaijan's ongoing efforts to bolster its national digital sovereignty. As the country continues to accelerate its digital transformation agenda, strengthening the resilience of critical information infrastructure against increasingly sophisticated cyber threats has become a strategic priority for the state.
