On September 10, "Cybersecurity and Privacy Analytics" LLC held a discussion on the draft law on the resilience of Ukraine's critical infrastructure.
The draft law implements Directive (EU) 2022/2557 on the resilience of critical entities (CER Directive), and is important for Ukraine as a future EU member, as well as an already active participant in two European markets – energy and electronic communications.
The discussion took place within the framework of the grant activity "Approximation of Ukrainian legislation in the field of critical infrastructure and cybersecurity regulation to EU legislation," carried out by "Cybersecurity and Privacy Analytics" LLC with the support of the USAID Project "Cybersecurity of Ukraine's Critical Infrastructure."
The participants of the discussion, which was also supported by the Verkhovna Rada of Ukraine Committee on National Security, Defence and Intelligence, considered important issues that need to be resolved before this draft law is submitted for registration in the Verkhovna Rada.
First and foremost, these are issues regarding:
- the role, structure and institutional capacity of the body that is to exercise supervision (control) over the activities of critical infrastructure operators;
- the organization of effective interaction between supervisory bodies in the field of critical infrastructure resilience, cybersecurity, regulatory bodies and the supervisory body in the field of personal data protection;
- the timelines for implementing the reform;
- the deferral period for introducing penalties for violations of legislation;
- the scope of the law and its extension to the security and defence sector;
- readiness to develop a critical infrastructure resilience strategy;
- and other no less critical and important issues.
The expert discussion was attended by representatives of: the Verkhovna Rada Committee on National Security, Defence and Intelligence, the National Security and Defence Council, the drafters, the authorized body in the field of critical infrastructure protection, regulators, operators of digital and other critical infrastructure, and experts from other international technical assistance projects.
Such a professional dialogue on the state and prospects of ensuring the resilience of critical infrastructure, its cybersecurity and the protection of facilities important for the digital state in its legal, technological and economic aspects, given the prospect of EU integration, will contribute to the development of a common policy, the growth of public-private partnership and will help to develop the necessary legislative changes for building joint measures with the European Union for a high level of critical infrastructure resilience.
The results of the discussion, key theses and documents proposed for discussion are available at the link.
