INTERNATIONAL STANDARDS AND FOREIGN EXPERIENCE IN THE LEGAL FRAMEWORK FOR CYBER RESILIENCE

Abstract

Introduction. This article examines international standards and foreign experience in the legal framework for cyber resilience amid growing global digital threats. The relevance of the topic stems from the transformation of cyber resilience from a technical category into a strategic priority for national and international security, which is particularly important for Ukraine in the context of military challenges and hybrid aggression. The problem addressed in the article lies in the fragmentary nature and lack of a systematic scientific and legal synthesis of contemporary international models of cyber resilience, which complicates the formation of a coherent concept for its implementation into Ukraine’s national security policy in the context of growing hybrid and cyber threats. The aim of the article is to provide a comprehensive analysis of the approaches of leading international organisations and states to the development of cyber resilience systems and to identify opportunities for implementing relevant experience into Ukraine’s national legislation. The methodological framework comprises general scientific and specialised legal methods, in particular comparative legal, systemicstructural and formal-logical analysis.

Summary of the main findings of the study. This paper examines the conceptual foundations of cyber resilience within NATO’s activities, in particular its link to the principle of collective defence and the development of institutional capacity to respond to cyber threats. The regulatory framework of the European Union is analysed, including the CRA, NIS2 and DORA regulations, which form an integrated digital resilience system. Particular attention is paid to the American model, based on NIST standards and CISA, as well as the British approach, which combines strategic man-agement with human capital development. It is argued that an effective cyber resilience system is formed on the basis of a combination of legal regulation, technical standards and public-private partnerships. It is determined that the priority areas for Ukraine are the adaptation of European legislation, the implementation of international standards and the enhancement of the role of human capital.

Conclusion. It has been established that cyber resilience is evolving into a systemic property of socio-technical systems, combining legal, organisational, economic and technological components. The hybrid model, combining the regulatory rigour of the EU, the engineering standards of the US, the coordination mechanisms of NATO and the socio-technical flexibility of the UK, has been identified as the most effective. For Ukraine, the key areas for implementation are identified as harmonisation with European regulatory acts, the development of sectoral information exchange cen-tres, and the strengthening of human capital as a fundamental element of cyber resilience.