Prime Minister of Ukraine Serhiy Koretsky held a coordination meeting on the implementation of national plans for the resilience of critical infrastructure, in which participated The leadership of the State Special Communications Service. It is this service that is entrusted with the functions of objective monitoring of the implementation of these plans at critical infrastructure facilities.
In addition, the new order of the State Service for Special Communications approves two key regulatory documents: the Procedure for exchanging information on cyber incidents (through secure channels and MISP platforms) and the Criteria for determining a significant cyber incident (orange, red, and black levels).
Sustainability coordination and government monitoring
Ensuring the uninterrupted functioning of state institutions and critical infrastructure facilities (CIF) in the face of systematic cyberattacks requires a transition from point response to end-to-end regulation. On July 28, 2026, the Head of the State Service for Special Communications Oleksandr Potiy and the First Deputy Head of the Service Rostyslav Zamlynskyy took part in a coordination meeting chaired by the Prime Minister of Ukraine Serhiy Koretsky.
The key task of the State Service for Special Communications has been defined as objective monitoring of the implementation of resilience plans at critical infrastructure facilities. At the same time, a new order of the Service, introducing new regulatory acts for operational cyber defense, has come into force.
Regulatory updates and MISP integration
The order of the State Special Communications Service approves two fundamental regulatory documents for state bodies and OKI operators:
-
📌 Procedure for exchanging information on cyber incidents: A unified mechanism for the prompt transmission of data on cyber attacks, vulnerabilities and attacker tactics (TTPs) has been established. The interaction of cybersecurity entities is now carried out through secure communication channels, specialized digital platforms and international MISP (Malware Information Sharing Platform) systems.
-
📌 Criteria for a significant cyber incident: A clear gradation of damage has been approved. Incidents of high (orange), critical (red), and extreme (black) gradation levels are classified as significant.
-
📊 Audit and government control: According to Serhiy Koretsky's announcement, the next step will be an expanded meeting with the participation of heads of local authorities and state-owned companies to eliminate the identified gaps in protection.
┌─ │Red │ │Meeting under the leadership of │ │vulnerabilities │ │Black (Extreme) │ │S. Koretsky │ └─
HiTech Expert Take
The approval of new rules for exchanging information about cyber incidents and the formalization of criteria for significant damage is a necessary step for the digitalization of public administration. Automation of the transmission of threat data through MISP platforms allows cybersecurity entities and critical infrastructure operators to proactively close vulnerabilities before they are massively used by hacker groups. A clear gradation of threat levels (from orange to black) optimizes the allocation of resources of CERT-UA response centers.
From an engineering perspective, tracking global infrastructure trends and developing advanced communication standards is crucial for the development of GovTech infrastructure and digitalization in Ukraine. As the Ministry of Digital Transformation deploys 60 national registries based on the Diya.Engine constructor and preparing a full AI transition to the Agentic State model, the use of such solutions will increase the sustainability and efficiency of government platforms, including national system "Obriy"At the same time, reliable cloud communication and instant data exchange with zero latency are fully provided by gigabit non-volatile GPON from Ukrtelecom, Vodafone, Kyivstar, thousands of other providers, as well as powerful data centers.
