New cybersecurity obligations for internet providers pass first reading in Milli Majlis

Azerbaijan's Milli Majlis (Parliament) has adopted in the first reading the establishment of new obligations in the field of cybersecurity for owners of internet information resources.

Report informs that the proposed amendments to the Law "On Information, Informatization and Protection of Information" were brought up for discussion at today's session of the extraordinary session of parliament.

The draft was prepared for the purpose of improving legal regulation in the field of information security and cybersecurity, protecting information infrastructure from cyber threats, creating institutional mechanisms for cybersecurity, and establishing the legal foundations of digital development processes.

According to the document, new concepts are added to the law, including information infrastructure, information infrastructure subject, cybersecurity, cyberspace, cyber hygiene, digital evidence, digital investigation, Computer Emergency Response Team (CERT), Security Operations Center (SOC), National CERT, State CERT, and other new concepts.

The draft law defines the rights and duties of state bodies, information infrastructure subjects, CERTs and SOCs in the field of cybersecurity, and establishes activity mechanisms for detecting, preventing, investigating, and eliminating cyber threats, cyber attacks, and cyber incidents.

The draft also establishes provisions related to ensuring cybersecurity of information infrastructure, conducting monitoring and audits on cybersecurity, carrying out information exchange on cyber incidents, conducting digital investigations, financing digital development projects, and implementing a regulatory test environment for testing digital solutions.

In addition, new obligations in the field of cybersecurity are established for information infrastructure subjects, internet providers, host providers, and owners of internet information resources, and the areas of activity and powers of the National CERT are expanded.

It was noted that the adoption of the draft will serve to improve the information security and cybersecurity system in the country, increase the effectiveness of the fight against cyber threats, strengthen the resilience of information infrastructure, and organize digital development processes more efficiently.

After discussions, the draft was put to a vote and adopted in the first reading.