The legal framework for cybersecurity of Russian Federation's critical infrastructure

Purpose: To establish the legal framework for cybersecurity Russian Federation’s critical infrastructure at the present stage of development. Methodology: Historical-legal and formally-legal method was used. Results: The article highlights the main legal acts in the field of cybersecurity, given their characteristics. Also discussed Russian Federation’s legislative initiatives in order to create legal basis for effective functioning security systems of Russian Federation’s critical information infrastructure. It is established that at the moment there is no universally accepted definition of «cyberspace», «cybersecurity», the lack of an unified approach to the terminology complicates the process of international cooperation. It is established that there is no universally accepted definition of cyberspace, cybersecurity at the moment, the lack of a unified approach to the terminology complicates the process of international cooperation. In this regard, it is necessary to develop common terminology for cyberspace and cybersecurity, harmonized with the existing terminology in the field of information security, information-psychological security. It is established that the leading role in the cybersecurity of critical infrastructure belongs to telecommunications. Numerous cases of purposeful use of ICT to damage critical infrastructure demonstrate the possibility of real damage. Identified and justified the need for an integrated approach to solving problems, combining the development of the regulatory framework, implementation of the best management practices of information security, certified information security, the full security of the information sphere of the state is possible only with the use of own equipment as well as remedies. Novelty/originality/value: The article possesses high scientific value, because it reveals a comprehensive approach to the cybersecurity of the Russian Federation’s critical infrastructure.