The Milli Majlis (National Assembly) has adopted, in the first reading, a bill introducing new cybersecurity obligations for owners of internet information resources. The proposed amendments to the Law "On Information, Informatization, and Protection of Information" were discussed during today's session of the parliament's extraordinary session.
Operative Information Center-OMM reports that the draft law was prepared to improve the legal framework for information and cybersecurity, protect critical information infrastructure from cyber threats, establish institutional mechanisms for cybersecurity, and define the legal foundations for digital development processes.
The document introduces several new concepts into the legislation, including "information infrastructure," "subject of information infrastructure," "cybersecurity," "cyberspace," "cyber hygiene," "digital evidence," "digital investigation," "Computer Emergency Response Team (CERT)," "Security Operations Center (SOC)," "National CERT," and "State CERT."
The bill establishes the rights and duties of state bodies, information infrastructure subjects, CERTs, and SOCs in the field of cybersecurity. It also defines mechanisms for detecting, preventing, investigating, and mitigating cyber threats, cyberattacks, and cyber incidents.
Furthermore, the legislation outlines provisions for ensuring the cybersecurity of information infrastructure, conducting monitoring and audits, exchanging information regarding cyber incidents, performing digital investigations, and implementing a regulatory test environment for financing digital development projects and testing digital solutions.
In addition to these measures, the bill imposes new cybersecurity obligations on information infrastructure subjects, internet service providers, host providers, and owners of internet information resources, while expanding the operational scope and authority of the National CERT.
It was noted that the adoption of this project will serve to improve the information and cybersecurity system in Azerbaijan, increase the effectiveness of the fight against cyber threats, strengthen the resilience of information infrastructure, and ensure more efficient organization of digital development processes. Following the discussions, the bill was put to a vote and adopted in the first reading.
Background: The move comes as Azerbaijan continues to accelerate its digital transformation strategy. By formalizing these cybersecurity standards, the country aims to align its national infrastructure with international best practices, ensuring that both state and private digital assets are protected against the growing global landscape of sophisticated cyber threats.
