BAKU, Azerbaijan, August 10. New obligations in
the field of cybersecurity have been established for owners of
internet information resources in Azerbaijan.
This is reflected in the amendments to the law "On information,
informatization and information protection" signed by President of
the Republic of Azerbaijan Ilham Aliyev.
According to the document, the law adds new concepts to the law:
information infrastructure, information infrastructure subject,
cybersecurity, cyberspace, cyber hygiene, digital evidence, digital
research, computer incident response center (CERT), Security
Operations Center (SOC), National CERT, State CERT and others.
The law defines the rights and obligations of state bodies,
information infrastructure subjects, CERTs and SOCs in the field of
cybersecurity, and establishes mechanisms for detecting,
preventing, investigating and eliminating cyber threats, cyber
attacks and cyber incidents.
The document also establishes provisions on ensuring the
cybersecurity of information infrastructure, conducting
cybersecurity monitoring and audits, exchanging information on
cyber incidents, conducting digital research, financing digital
development projects, and implementing a regulatory test
environment for testing digital solutions.
At the same time, new obligations in the field of cybersecurity
are established for information infrastructure entities, internet
providers, host providers, and owners of internet information
resources, and the directions and powers of the National CERT are
expanded.
According to the relevant decree signed by President Ilham
Aliyev in connection with the implementation of the law, the
Cabinet of Ministers must prepare and submit to the President
proposals on the rules for implementing the regulatory test
environment, including monitoring the activities of persons
participating in it, the maximum duration of the regulatory test
environment, and the procedure for applying exceptions to the
requirements of regulatory legal acts within one month.
Besides, proposals on the rules for ensuring information
security and cybersecurity of the information infrastructure of
state bodies (organizations) (except for intelligence and
counterintelligence entities), as well as protected persons,
protected and strategic objects, must be prepared and submitted to
the President within three months.
According to the decree, the State Security Service, the State
Service for Special Communications and Information Security were
instructed and the Central Bank was recommended to take measures
within one year to include computer incident response centers and
security operations centers in the register of CERTs and SOCs and
inform the President.
