A/75/123
opportunities for cooperation in the development of its strategic, legal, institutional
and capacity-building pillars, as well as for the cyberculture transformation proc ess.
With active cooperation between sectoral agencies 6 in the field of cybersecurity,
the third draft of the national cybersecurity strategy and its action plan were
elaborated in Georgia in 2019. 7 The Office of the National Security Council played a
coordinating role in this process. At the same time, relevant stakeholders from the
private sector, academia and civil society were also involved in the respective
endeavours. As Georgia strives to make its national framework compatible with the
respective Euro-Atlantic mechanisms, the strategic development process is heavily
advised by foreign experts and like-minded national consultants. Of special
significance in the context of drafting the national cybersecurity strategy and its
action plan was the assistance rendered by the United Kingdom to relevant Georgian
cybersecurity actors. The draft national cybersecurity strategy and its action plan will
be approved by the Government of Georgia in the course of 2020. The respective
documents will undergo the scrutiny of the permanent inter-agency commission
created in January 2020 at the National Security Council and entr usted with the
function of coordinating the elaboration of the national-level conceptual documents
in the field of security. Subsequently, the draft documents will be submitted by the
National Security Council to the Government of Georgia for approval.
Georgia continues to strengthen the enforcement of legal and regulatory
frameworks for the cyberdomain. Comprehensive information and communication s
technology legislative and regulatory frameworks addressing cybersecurity have been
implemented, and legislation protecting the rights of individuals and organizations in
the digital environment has been adopted in Georgia. Laws address the protection of
the critical information infrastructure, the liability of Internet service providers,
incident reporting obligations and the security of e-transactions. As a next step,
Georgia has ambitious plans to make its cybersecurity legal framework compatible
with the European Union Directive on the security of network and information
systems. Namely, responsible agencies, in the course of 2019, have already initiated
the cooperation process with the European Union and, by the end of this year, the
Twinning Fiche will be developed, with the aim of helping Georgia with the
harmonization process. As a result of the twinning project, Georgia will update its
Information Security Law, which, among other important aspects, will clearly define
a cybersecurity governance framework, authorities for the Directive, and roles and
responsibilities in cybersecurity at the strategic, operational and tactical levels.
Georgia has also started another ambitious process of designing and adopting a
European Union-compatible model for critical information infrastructure protection.
In the course of 2019, several workshops were conducted in order to discuss a proper
system for identification and cooperation with critical infrastructures in the
cyberfield. Georgia created a relevant methodology and questionnaires for critical
information infrastructures. The process involved discussions with privat ely owned
critical sector representatives from different sectors and business fields.
Currently, information security policy and cybersecurity requirements are in the
process of being implemented in all those organizations defined as critical
information infrastructures. The responsible State agencies assist these entities in the
implementation of information security policies and cybersecurity es sentials,
providing recommendations, expertise and trainings, as well as through more
comprehensive activities, such as information security audits, penetration testing and
other information and cybersecurity services. Various projects for the implementati on
__________________
6
7
42/84
Data Exchange Agency (Ministry of Justice), Cybersecurity Bureau (Ministry of Defence),
Operative-technical Agency (State Security Service).
Foreseen for the three-year period 2020–2023.
20-08285
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents