LEGAL MECHANISMS FOR ENSURING CYBERSECURITY OF GOVERNMENT INFORMATION SYSTEMS IN THE CONTEXT OF DIGITALIZATION OF PUBLIC ADMINISTRATION УДК 343.575

Abstract

The article examines the legalaspects of ensuring cybersecurity of the criticalinformation infrastructure (CII) in the contextof the digitalization of public services. It analyzesthe current legislation of the Russian Federation,including Federal Laws No. 149-FZ, No. 152-FZ,and No. 187-FZ, as well as the new provisionsof Article 13.12.1 of the Code of AdministrativeOffenses of the Russian Federation, whichestablishes administrative liability for violationsof CII protection requirements. Particularattention is paid to assessing the effectivenessof the implementation of these norms inpractice and to the problems associated withthe insufficient clarity of the status of operatorsand the delineation of their responsibilities. Thearticle examines examples of cyber incidents ingovernment digital systems such as Gosuslugi,GIS Housing and Utilities, and GAS Justice,which demonstrate the vulnerability of state information infrastructure to both external andinternal threats. It also presents the views ofcontemporary Russian researchers analyzingthe state of legal regulation in the field ofcybersecurity and personal data protection.The study substantiates the need to improvelegislation considering technological changes, toimplement international standards (ISO 27001,ISO 27701), and to strengthen the personalliability of officials for non-compliance withsecurity requirements. The conclusion offersrecommendations for improving organizationaland legal mechanisms for protecting digitalservices, increasing the transparency of theirfunctioning, and fostering a legal cultureamong participants in information relations.The research is of an applied nature and canbe used in the development of national digitalsecurity strategies and the modernization ofthe regulatory framework in the field of CIIprotection.