Azerbaijan is implementing a unified registry of risks in the field of information security

The Government of Azerbaijan has approved a new regulation on the creation and maintenance of an information security risk registry. The corresponding decision was signed by the country's Prime Minister Ali Asadov and published on December 26, 2025.

According to the document, all state bodies, legal entities with state participation, and budgetary organizations are required to form their own information risk registers within six months in accordance with the established procedure. The main goal of this initiative is to enhance the resilience of information infrastructure and prevent threats in cyberspace.

The rules define the legal, technical, and organizational framework for maintaining the registry. Information necessary for risk assessment and management will be classified as confidential data, and its processing will be carried out in secure systems of authorized structures.

As part of the implementation of the Strategy for Information Security and Cybersecurity for 2023-2027, the creation of a threat and solution catalog on the website of the State Service of Special Communications and Information Security is also planned. This catalog will include a classified list of threats to the information space with continuously updated countermeasures.

The introduction of the risk registry and related mechanisms is aimed at systematically strengthening the country's digital security, improving the effectiveness of predicting and preventing cyber threats, and enhancing coordination among state structures in the field of information protection.

Source: Tech.Az