LEGAL AND METHODOLOGICAL FOUNDATIONS FOR THE IMPLEMENTATION OF EUROPEAN IOCTA STANDARDS IN THE DIGITAL SECURITY SYSTEM OF UKRAINE: A HUMANITARIAN ASPECT
Abstract
Introduction. The article provides a comprehensive theoretical and legal analysis of the implementation of the European methodology for the Internet Organised Crime Threat Assessment (IOCTA) into the national digital security system. The relevance of the study is driven by the necessity to transform techno-centric approaches to cybersecurity under martial law and transition toward an anthropocentric model for protecting citizens' constitutional rights. The problem statement identifies the risks of "institutional isomorphism" and the phenomenon of "decoupling" in the formal adoption of Western models without proper recontextualization. The methodological framework of the study is based on the concepts of sociological institutionalism from the Stanford School, the system-structural method, and methods of predictive risk modeling. The aim of the article is to justify the humanitarian vector of digital security as a foundation for Ukraine's institutional resilience.
Summary of the main research results. It is proven that digital security in modern conditions is not merely a technical function but a critical humanitarian task aimed at protecting human dignity and freedom. The author conducts a critical analysis of previous experience with implementing the SOCTA methodology in Ukraine, which revealed a loss of proactive analytics and an inability to use results predictively due to a formalistic approach to standard adoption. The transition from "analytics of control" to "analytics of trust" is justified, where the key indicator is the strengthening of social resilience. The article details the regulations of the strategic analytical cycle, including continuous OSINT monitoring, expert validation through in-depth interviews, and comprehensive Foresight analysis across priority sectors. Particular attention is paid to the ethical component of the analytical process, where the analyst emerges as a communicator of strategic meanings and an ethical mediator. The creation of a "ukrainian school of analytics" is proposed to develop new institutional competencies for law enforcement agencies.
Conclusions. A new paradigm for digital security is formulated, based on predictive risk management and institutional capacity to adapt international standards to a specific sociolegal context. It is concluded that the success of IOCTA implementation depends on the analytical system's ability to detect "weak signals" of technological threats while subordinating them to the protection of human dignity and the strengthening of the democratic order. Building a culture of predictive analytics is identified as a key step toward overcoming systemic vulnerabilities and ensuring Ukraine's sustainable development in the era of global digitalization.
Downloads
References
/References
Про основні засади забезпечення кібербезпеки України : Закон України від 05.10.2017 № 2163-VIII. URL: https://zakon.rada.gov.ua/laws/show/2163-19.
Shukla, G. (2023). Cyber crime investigation and digital forensics. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.4616519.
Dunsin, D., Ghanem, M., Ouazzane, K., & Vassilev, V. (2023). A Comprehensive Analysis of the Role of Artificial Intelligence and Machine Learning in Modern Digital Forensics and Incident Response. Forensic Sci. Int. Digit. Investig., 48, 301675. https://doi.org/10.1016/j.fsidi.2023.301675.
Khan, H., Atif, S., & Mustufa, A. (2025). The Role of Digital Forensics in Cybercrime Investigations. NUML International Journal of Engineering and Computing. https://doi.org/10.52015/nijec.v3i2.85.
Narasimhan, P., & Kala, N. (2025). Emerging Trends in Digital Forensics : Investigating Cybercrime. International Journal of Scientific Research in Computer Science, Engineering and Information Technology. https://doi.org/10.32628/cseit251451.
Al Khater W. та ін. Comprehensive Review of Cybercrime Detection Techniques. IEEE Access. 2020. DOI: 10.1109/ACCESS.2020.3011259
Cascavilla G., Tamburri D., Heuvel W. Cybercrime Threat Intelligence: A Systematic Multi Vocal Literature Review. Computers & Security. 2021. DOI: 10.1016/j.cose.2021.102258
Saeed M., Alshahrani Z., Mahmoud A.I., Ramadan. Cyber Attacks – Trends, Patterns, and Security Countermeasures. 2020.
Didenko, O. (2025). Digital forensics and international counteraction to cybercrime (based on the example of e-commerce). Analytical and Comparative Jurisprudence. https://doi.org/10.24144/2788-6018.2025.04.3.26.
Al-Husaini, Y., Al-Khateeb, H., Warren, M., Pan, L., & Epiphaniou, G. (2020). Collaborative Digital Forensic Investigations Model for Law Enforcement. Security and Organization within IoT and Smart Cities. https://doi.org/10.1201/9781003018636-9.
Korzun, S. (2024). Transformation of the administrative and legal status of cybercrime countermeasures entities. Public Policy and Accounting. https://doi.org/10.26642/ppa-2024-2(10)-53-62
Askar, F.A. et al. trans. 2025. Evaluating the Effectiveness of Digital Forensic Investigations in Combating Cybercrime. Journal of Science and Technology. 30, 10 (Sep. 2025). DOI:https://doi.org/10.20428/jst.v30i10.2911.
Cassidy A.A.T.J., Fuad A., As Shofy M.U.A. Emerging Trends and Challenges in Digital Crime: Cyber Criminal Tactics and Countermeasures. TechComp Innovations. 2024. DOI: 10.70063/techcompinnovations.v1i1.25
Rakha N.A. Cybercrime and the Law: Addressing the Challenges of Digital Forensics in Criminal Investigations. Mexican Law Review. 2024. DOI: 10.22201/iij.24485306e.2024.2.18892.
Sarkar, G., & Shukla, S. (2023). Behavioral Analysis of Cybercrime: Paving the Way for Effective Policing Strategies. Journal of Economic Criminology. https://doi.org/10.1016/j.jeconc.2023.100034.
Mphatheni, M., & Maluleke, W. (2022). Cybersecurity as a response to combating cybercrime. International Journal of Research in Business and Social Science (2147- 4478). https://doi.org/10.20525/ijrbs.v11i4.1714.
Surakanti, S., Goundar, S., & Dwight, J. (2025). Countering anti-forensic tactics in cybercrime investigations – a systematic literature review. International Journal of Information Security, 24. https://doi.org/10.1007/s10207-025-01131-y.
Стратегія інтеграції державної політики протидії кіберзлочинності в європейську систему кібербезпеки : моно-графія / За загальною редакцією В. В. Євдокимова, Д. О. Грицишена. – Житомир : Вид. О. О. Євенок, 2024. –300с.
Кіберзлочинність та електронні докази : навч. посібник / [Б. М. Головкін, О. І. Денькович, В. В. Луцик, Д. М. Цехан] ; за ред. канд. Юрид. Наук, доц. Ольги Денькович, д-ра права, проф. Габріеле Шмельцер. – Електрон. Вид. – Львів : ЛНУ імю Івана Франка, 2022. – 298 с.
Методика розслідування шахрайства в інтернет-комерції: теорія та практика : монографія / К. О. Чаплинський, А. В. Рейнгольд, Н. В. Павлова. — Одеса : Видавництво «Юридика», 2024. — 242 с.
Korystin О., Korchenko О., Kazmirchuk S., Demediuk S., Korystin O. Comparative Risk Assessment of Cyber Threats Based on Average and Fuzzy Sets Theory. International Journal of Computer Network and Information Security. 2024. Vol. 16. №. 1. P. 24-34. DOI: https://doi.org/10.5815/ijcnis.2024.01.02. SCOPUS Q3
Korystin О., Demediuk S., Likhovitskyy Y., Kardashevskyy Y., Mitina O. Priorities for the Strategic Development of Ukraine’s Cybersecurity Based on the Analysis of Expert Sampling Patterns, International Journal of Information Technology and Computer Science. 2025. Vol. 17. No. 2. P. 24-35. DOI: https://doi.org/10.5815/ijitcs.2025.02.03 (SCOPUS Q3)
Korchenko O., Korystin O., Shulha V., Kazmirchuk S., Demediuk S., Zybin S. Sustainable Development of Smart Regions via Cybersecurity of National Infrastructure: A Fuzzy Risk Assessment Approach. Sustainability. (2025). Vol. 17. Is. 19. P. 8757. https://doi.org/10.3390/su17198757
Користін О.Є., Демедюк С.В., Панченко Є.В., Користін О.О. Національні реалії аналізу кіберзлочинності за ме-тодологією Європолу ІОСТА. Південноукраїнський правничий часопис. 2023. № 3. С.53-59. DOI https://doi.org/10.32850/sulj.2023.3.10
Демедюк С.В., Користін О.Є. Тенденції та характерні особливості on-line шахрайства в Україні. Наука і право-охорона. 2024. Том 3-4. № 65-66. С. 142-154. DOI: https://doi.org/10.36486/np.2024.3(65).12
Демедюк С.В. Сучасні тенденції on-line шахрайства в Україні. Право і суспільство. 2025. №4. Т. 2. С. 186-194. DOI: https://doi.org/10.32842/2078-3736/2025.4.2.28
Демедюк С.В. Темна сторона комп’ютерних мереж: злочини та незаконна діяльність он-лайн. Правові новели. 2025. № 26. 157-166. DOI: https://doi.org/10.32782/ln.2025.26.18
Meyer J. W., Rowan B. Institutionalized Organizations: Formal Structure as Myth and Ceremony. American Journal of Sociology. 1977. Vol. 83, No. 2. P. 340–363. http://dx.doi.org/10.1086/226550
Scott W. R. Institutions and Organizations: Ideas, Interests, and Identities. 4th ed. SAGE Publications, 2013. 360 p.
Brenner, Susan W, Cyber Threats: The Emerging Fault Lines of the Nation State (New York, 2009; online edn, Oxford Academic, 1 Sept. 2009), https://doi.org/10.1093/acprof:oso/9780195385014.001.0001.
McGuire M. Hypercrime: The New Geometry of Harm. Routledge, 2007. 400 p.
Europol. Internet Organised Crime Threat Assessment (IOCTA) 2024. URL: https://www.europol.europa.eu/publications-events/main-reports/iocta-2024.
Europol. Internet Organised Crime Threat Assessment (IOCTA) 2024. URL: https://www.europol.europa.eu/cms/sites/default/files/documents/Steal-deal-repeat-IOCTA_2025.pdf
Grabosky P. Cybercrime. Cambridge University Press, 2016. 168 p.
EU-SOCTA 2025. EUROPEAN UNION SERIOUS AND ORGANISED CRIME THREAT ASSESSMENT. https://www.europol.europa.eu/cms/sites/default/files/documents/EU-SOCTA%202025%20-%20Executive%20Summary.pdf
Постанова КМУ від 26 січня 2022 р. №59. Деякі питання запровадження в діяльність центральних органів вико-навчої влади системи оцінки SOCTA Україна. https://zakon.rada.gov.ua/laws/show/en/59-2022-%D0%BF/ed20220126#n64
Korystin O., Svyrydiuk N. NATIONAL REALITIES OF IMPLEMENTATION OF EUROPOL METHODOLOGY “SOCTA”. South Ukrainian Law Journal. January 2022. DOI: 10.32850/sulj.2022.1-2.20.
Ratcliffe, J. H. (2016). Intelligence-Led Policing. Australian Institute of Criminology. https://doi.org/10.4324/9781315717579
Pro osnovni zasady zabezpechennia kiberbezpeky Ukrainy : Zakon Ukrainy vid 05.10.2017 № 2163-VIII. URL: https://zakon.rada.gov.ua/laws/show/2163-19 (in Ukrainian)
Shukla, G. (2023). Cyber crime investigation and digital forensics. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.4616519.
Dunsin, D., Ghanem, M., Ouazzane, K., & Vassilev, V. (2023). A Comprehensive Analysis of the Role of Artificial Intel-ligence and Machine Learning in Modern Digital Forensics and Incident Response. Forensic Sci. Int. Digit. Investig., 48, 301675. https://doi.org/10.1016/j.fsidi.2023.301675.
Khan, H., Atif, S., & Mustufa, A. (2025). The Role of Digital Forensics in Cybercrime Investigations. NUML International Journal of Engineering and Computing. https://doi.org/10.52015/nijec.v3i2.85.
Narasimhan, P., & Kala, N. (2025). Emerging Trends in Digital Forensics : Investigating Cybercrime. International Journal of Scientific Research in Computer Science, Engineering and Information Technology. https://doi.org/10.32628/cseit251451.
Al Khater W. та ін. Comprehensive Review of Cybercrime Detection Techniques. IEEE Access. 2020. DOI: 10.1109/ACCESS.2020.3011259
Cascavilla G., Tamburri D., Heuvel W. Cybercrime Threat Intelligence: A Systematic Multi Vocal Literature Review. Computers & Security. 2021. DOI: 10.1016/j.cose.2021.102258
Saeed M., Alshahrani Z., Mahmoud A.I., Ramadan. Cyber Attacks – Trends, Patterns, and Security Countermeasures. 2020.
Didenko, O. (2025). Digital forensics and international counteraction to cybercrime (based on the example of e-commerce). Analytical and Comparative Jurisprudence. https://doi.org/10.24144/2788-6018.2025.04.3.26.
Al-Husaini, Y., Al-Khateeb, H., Warren, M., Pan, L., & Epiphaniou, G. (2020). Collaborative Digital Forensic Investiga-tions Model for Law Enforcement. Security and Organization within IoT and Smart Cities. https://doi.org/10.1201/9781003018636-9.
Korzun, S. (2024). Transformation of the administrative and legal status of cybercrime countermeasures entities. Public Policy and Accounting. https://doi.org/10.26642/ppa-2024-2(10)-53-62
Askar, F.A. et al. trans. 2025. Evaluating the Effectiveness of Digital Forensic Investigations in Combating Cybercrime. Journal of Science and Technology. 30, 10 (Sep. 2025). DOI: https://doi.org/10.20428/jst.v30i10.2911.
Cassidy A.A.T.J., Fuad A., As Shofy M.U.A. Emerging Trends and Challenges in Digital Crime: Cyber Criminal Tactics and Countermeasures. TechComp Innovations. 2024. DOI: 10.70063/techcompinnovations.v1i1.25
Rakha N.A. Cybercrime and the Law: Addressing the Challenges of Digital Forensics in Criminal Investigations. Mexican Law Review. 2024. DOI: 10.22201/iij.24485306e.2024.2.18892.
Sarkar, G., & Shukla, S. (2023). Behavioral Analysis of Cybercrime: Paving the Way for Effective Policing Strategies. Journal of Economic Criminology. https://doi.org/10.1016/j.jeconc.2023.100034.
Mphatheni, M., & Maluleke, W. (2022). Cybersecurity as a response to combating cybercrime. International Journal of Research in Business and Social Science (2147- 4478). https://doi.org/10.20525/ijrbs.v11i4.1714.
Surakanti, S., Goundar, S., & Dwight, J. (2025). Countering anti-forensic tactics in cybercrime investigations – a system-atic literature review. International Journal of Information Security, 24. https://doi.org/10.1007/s10207-025-01131-y.
Stratehiia intehratsii derzhavnoi polityky protydii kiberzlochynnosti v yevropeisku systemu kiberbezpeky : monohrafiia / Za zahalnoiu redaktsiieiu V. V. Yevdokymova, D. O. Hrytsyshena. – Zhytomyr : Vyd. O. O. Yevenok, 2024. –300с. (in Ukrainian)
Kiberzlochynnist ta elektronni dokazy : navch. posibnyk / [B. M. Holovkin, O. I. Denkovych, V. V. Lutsyk, D. M. Tsekhan] ; za red. kand. Yuryd. Nauk, dots. Olhy Denkovych, d-ra prava, prof. Habriele Shmeltser. – Elektron. Vyd. – Lviv : LNU imiu Ivana Franka, 2022. – 298 с. (in Ukrainian)
Metodyka rozsliduvannia shakhraistva v internet-komertsii: teoriia ta praktyka : monohrafiia / K. O. Chaplynskyi, A. V. Reinhold, N. V. Pavlova. — Odesa : Vydavnytstvo «Yurydyka», 2024. — 242 с. (in Ukrainian)
Korystin О., Korchenko О., Kazmirchuk S., Demediuk S., Korystin O. Comparative Risk Assessment of Cyber Threats Based on Average and Fuzzy Sets Theory. International Journal of Computer Network and Information Security. 2024. Vol. 16. №. 1. P. 24-34. DOI: https://doi.org/10.5815/ijcnis.2024.01.02. SCOPUS Q3
Korystin О., Demediuk S., Likhovitskyy Y., Kardashevskyy Y., Mitina O. Priorities for the Strategic Development of Ukraine’s Cybersecurity Based on the Analysis of Expert Sampling Patterns, International Journal of Information Technology and Computer Science. 2025. Vol. 17. No. 2. P. 24-35. DOI: https://doi.org/10.5815/ijitcs.2025.02.03 (SCOPUS Q3)
Korchenko O., Korystin O., Shulha V., Kazmirchuk S., Demediuk S., Zybin S. Sustainable Development of Smart Re-gions via Cybersecurity of National Infrastructure: A Fuzzy Risk Assessment Approach. Sustainability. (2025). Vol. 17. Is. 19. P. 8757. https://doi.org/10.3390/su17198757
Korystin O.Ye., Demediuk S.V., Panchenko Ye.V., Korystin O.O. Natsionalni realii analizu kiberzlochynnosti za metod-olohiieiu Yevropolu IOSTA. Pivdennoukrainskyi pravnychyi chasopys. 2023. № 3. S.53-59. DOI https://doi.org/10.32850/sulj.2023.3.10(in Ukrainian)
Demediuk S.V., Korystin O.Ye. Tendentsii ta kharakterni osoblyvosti on-line shakhraistva v Ukraini. Nauka i pravookho-rona. 2024. Tom 3-4. № 65-66. S. 142-154. DOI: https://doi.org/10.36486/np.2024.3(65).12 (in Ukrainian)
Demediuk S.V. Suchasni tendentsii on-line shakhraistva v Ukraini. Pravo i suspilstvo. 2025. №4. T. 2. S. 186-194. DOI: https://doi.org/10.32842/2078-3736/2025.4.2.28(in Ukrainian)
Demediuk S.V. Temna storona kompiuternykh merezh: zlochyny ta nezakonna diialnist on-lain. Pravovi novely. 2025. № 26. 157-166. DOI: https://doi.org/10.32782/ln.2025.26.18(in Ukrainian)
Meyer J. W., Rowan B. Institutionalized Organizations: Formal Structure as Myth and Ceremony. American Journal of Sociology. 1977. Vol. 83, No. 2. P. 340–363. http://dx.doi.org/10.1086/226550
Scott W. R. Institutions and Organizations: Ideas, Interests, and Identities. 4th ed. SAGE Publications, 2013. 360 p.
Brenner, Susan W, Cyber Threats: The Emerging Fault Lines of the Nation State (New York, 2009; online edn, Oxford Academic, 1 Sept. 2009), https://doi.org/10.1093/acprof:oso/9780195385014.001.0001.
McGuire M. Hypercrime: The New Geometry of Harm. Routledge, 2007. 400 p.
Europol. Internet Organised Crime Threat Assessment (IOCTA) 2024. URL: https://www.europol.europa.eu/publications-events/main-reports/iocta-2024.
Europol. Internet Organised Crime Threat Assessment (IOCTA) 2024. URL: https://www.europol.europa.eu/cms/sites/default/files/documents/Steal-deal-repeat-IOCTA_2025.pdf
Grabosky P. Cybercrime. Cambridge University Press, 2016. 168 p.
EU-SOCTA 2025. EUROPEAN UNION SERIOUS AND ORGANISED CRIME THREAT ASSESSMENT. https://www.europol.europa.eu/cms/sites/default/files/documents/EU-SOCTA%202025%20-%20Executive%20Summary.pdf
Postanova KMU vid 26 sichnia 2022 r. №59. Deiaki pytannia zaprovadzhennia v diialnist tsentralnykh orhaniv vy-konavchoi vlady systemy otsinky SOCTA Ukraina. https://zakon.rada.gov.ua/laws/show/en/59-2022-%D0%BF/ed20220126#n64(in Ukrainian)
Korystin O., Svyrydiuk N. NATIONAL REALITIES OF IMPLEMENTATION OF EUROPOL METHODOLOGY “SOCTA”. South Ukrainian Law Journal/ January 2022. DOI: 10.32850/sulj.2022.1-2.20.
Ratcliffe, J. H. (2016). Intelligence-Led Policing. Australian Institute of Criminology. https://doi.org/10.4324/9781315717579
Copyright (c) 2026 Oleksandr Korystin, Serhii Demedyuk

This work is licensed under a Creative Commons Attribution 4.0 International License.