Правові аспекти забезпечення кібербезпеки об’єктів критичної інфраструктури: національний та міжнародний вимір

The article examines the legal aspects of ensuring cybersecurity of critical infrastructure, which is a fundamental element of national security in the modern world. Critical infrastructure, such as energy systems, transport networks, the banking sector and government institutions, are of particular value and at the same time are the most vulnerable to cyber threats.  Given the constant increase in the number and complexity  of cyber incidents,  ensuring  legal regulation of this area is a key challenge for states. The paper analyzes the national legislation of Ukraine, in particular the legislative acts regulating the cybersecurity of critical infrastructure, such as the Law of Ukraine “On the Basic Principles of Ensuring Cybersecurity of Ukraine” and related regulatory legal acts. It examines the extent to which these documents meet modern challenges, including the conditions of martial law, increasing digitalization and globalization of cyber threats. Particular attention is paid to information protection mechanisms and interdepartmental coordination, as well as their effectiveness in practical implementation. The article also considers international experience in the field of cybersecurity, in particular the approaches implemented in the European Union, the USA and other countries. An analysis of key international standards and recommendations, such as NIST, ISO/IEC 27001, and the European NIS2 Directive, is carried out, which are aimed at increasing the resilience of critical infrastructure to cyber threats. It shows how international cooperation and integration into global initiatives, including NATO, OSCE and EU, can contribute to improving cybersecurity at the national level. The results of the study revealed a number of problems that complicate the effective legal regulation of cybersecurity in Ukraine: the lack of a comprehensive approach to cyber risk management, weak integration of international standards into national legislation, limited resources to respond to cyber threats. The paper proposes specific ways to improve legal regulation, including harmonizing national legislation with international norms, developing clear mechanisms for cooperation between government agencies, the private sector and international partners, as well as strengthening the training of cybersecurity specialists. The paper emphasizes the importance of strategic planning in the field of cybersecurity, the formation of long-term state policy and the active involvement of international organizations in the development of this industry. The article may be useful for academics, civil servants, private sector representatives and international experts dealing with cybersecurity, information security and legal regulation in the context of digitalization.