EUROPEAN APPROACHES TO GOVERNMENT REGULATION OF INFORMATION SECURITY: CURRENT MECHANISMS AND PROSPECTS FOR IMPLEMENTATION IN UKRAINE

Abstract

This article examines contemporary European approaches to government regulation of information security in the context of digital transformation, the development of the information society, and the escalation of information and cyber threats. It analyzes the European Union’s key regulatory and institutional mechanisms for ensuring information security. Particular attention is paid to the provisions of the NIS2 Directive, the DORA Regulation, the General Data Protection Regulation (GDPR), the Cybersecurity Act, as well as the activities of the CSIRTs Network, EU-CyCLONe, and the Digital Europe Program. Their role in shaping the modern European model of state regulation of information security is identified; this model is based on the principles of preventive management of information risks, interagency coordination, harmonization of regulatory frameworks, development of digital resilience, and standardization of mechanisms for protecting information resources. This paper summarizes the main mechanisms of state regulation of information security applied in the European Union and identifies opportunities for adapting them to the Ukrainian system of public administration. Practical approaches to implementing European best practices are proposed, including: the introduction of risk-based information security management, the improvement of mechanisms for protecting critical information infrastructure, developing an integrated system of interagency cooperation, establishing a national certification system for digital products and services, regularly testing the digital resilience of government information systems, using artificial intelligence technologies to monitor the information space and detect information threats, and developing the digital competencies of public sector professionals. It has been demonstrated that the implementation of modern European mechanisms for state regulation of information security will contribute to improving the effectiveness of information risk management, strengthening the institutional capacity of government agencies, developing digital resilience, enhancing interagency coordination, and harmonizing national legislation with European Union law. The practical significance of this study lies in the potential to apply its findings in the formulation and implementation of state policy in the field of information security, the improvement of the regulatory framework, the modernization of the system of state regulation of information security, and the development of strategic documents aimed at strengthening Ukraine’s information and cyber resilience in the context of digital transformation and European integration.