Article 3. Basic concepts

The following basic concepts are used in this Law:

object of informatization — information systems of various levels and purposes, telecommunication networks, technical means of information processing, and premises where these means are installed and operated.

cybercrime — a totality of crimes carried out in cyberspace using software and technical means, with the aim of seizing information, modifying it, destroying it, or hacking information systems and resources.

cyberspace — a virtual environment created with the help of information technologies

cyber threat — a complex of conditions and factors in cyberspace that pose a threat to the interests of the individual, society, and the state.

cybersecurity — the state of protection of the interests of the individual, society, and the state from external and internal threats in cyberspace.

cybersecurity incident — an event in cyberspace that resulted in failures in the operation of information systems and (or) violations of the accessibility of information in them, the integrity, and its free use.

cybersecurity object — a complex of information systems used in the activity of ensuring cyber protection of information and cybersecurity of national information systems and resources, including critical information infrastructure objects.

cybersecurity subject — a legal entity or individual entrepreneur having certain rights and duties related to the possession, use, and disposal of national information resources and the provision of informational electronic services for their use, information protection, and cybersecurity, including critical information infrastructure subjects.

cyber protection — a complex of legal, organizational, financial-economic, engineering-technical measures, as well as measures for cryptographic and technical data protection, aimed at preventing cybersecurity incidents, detecting and protecting against cyberattacks, eliminating the consequences of cyberattacks, and restoring the stability and reliability of the operation of telecommunication networks, information systems, and resources.

cyberattack — an action posing a threat to cybersecurity, deliberately carried out in cyberspace using hardware, hardware-software, and software tools.

critical information infrastructure — a complex of automated control systems, information systems, and resources of networks and technological processes that have important strategic and socio-economic significance.