Armenia Introduces International Cybersecurity Standards: Businesses Given 2 Years to Transition

New requirements will affect critical infrastructure and certification of information security companies

The Government of Armenia has approved a list of international cybersecurity standards. The decision was made in furtherance of the Law "On Cybersecurity," which was adopted by the National Assembly late last year. The new norms are aimed at forming a unified system for protecting critical infrastructure and vital industries.

According to Gevorg Mantashyan, First Deputy Minister of High-Tech Industry, international security standards will be implemented in key sectors as part of the reform. Requirements have also been established for companies providing cybersecurity services and for auditors who will conduct inspections of relevant systems.

Special attention is paid to certification: organizations will have to confirm compliance with the standards and submit documents to the Commission for Regulation of Information Systems by January 4, 2028. A transition period of 24 months is provided for adaptation. The authorities acknowledge that the new rules will create additional burdens for businesses, but consider them necessary to improve the country's overall level of cyber protection.