Armenia is set to introduce legislation aimed at safeguarding critical infrastructure and state information systems against cyberattacks
YEREVAN, September 23. /ARKA/. A cybersecurity framework is being developed for information systems in essential sectors and critical information infrastructure within Armenia.
The relevant legislative package, which includes "On Cybersecurity," "On Public Information," and "On the Regulatory Authority for Information Systems," received a favorable review during the first reading by the parliamentary committee on state and legal issues on September 22.
As noted by Minister of High-Tech Industry Mkhitar Hayrapetyan, there has been a significant rise in cyberattacks, cyberincidents, and cybersecurity challenges over the past five years, highlighting the urgent need for appropriate regulatory measures.
He stated that the passage of the "On Cybersecurity" law does not imply the resolution of all existing issues or the complete regulation of the sector; it will be followed by the enactment of approximately 30 additional regulatory acts.
"The objective is to establish a cybersecurity framework for the information systems of essential sectors and the critical information infrastructure of the republic," emphasized Hayrapetyan.
The minister also proposed the establishment of a new autonomous regulatory authority for information systems, which will take on cybersecurity responsibilities within the public administration framework and coordinate the policies set forth by the ministry.
"The agency will be endowed with a variety of regulatory powers, particularly concerning the accessibility and management of public information – overseeing the implementation, management, and maintenance of government digital solutions, ensuring uninterrupted 24/7 operations, continuous monitoring, and safeguarding data, digital storage, and systems in line with international standards, as well as the deployment of modern cloud infrastructures, services, and technologies, which will also be accessible to the private sector," the minister elaborated.
Hayrapetyan indicated that the suggestion involves establishing a new architecture within the relevant structures. "It should be founded on well-organized data and secure storage, which will greatly mitigate the risks and temptations associated with cyberattacks targeting companies that manage critical infrastructure," Hayrapetyan remarked, emphasizing that the current state of cyber vulnerability in Armenia is disheartening, affecting both the public and private sectors.
The minister asserted that the proposed legislation is crucial for safeguarding Armenia's economy and national interests.
The subsequent proposed reform pertains to data policy, which seeks to implement the principle of "single data provision" for both public and private sectors, as noted by Hayrapetyan.-0-