meta_id 3223412

On June 19, 2026, the Operational-Analytical Centre (OAC) under the President of Belarus published an order revising the rules governing the national cybersecurity system. The order, available on the National Legal Internet Portal of Belarus, introduces changes designed to make cybersecurity legislation practically implementable for all participants in the national system, from large cybersecurity centres to smaller internet-connected organisations. Key changes include a revised cyber-incident classification system introducing three severity levels (previously two) based on the scale of consequences. This change has practical legal significance as Articles 23.11 and 23.12 of the Code of Administrative Offences, which establish administrative liability for cybersecurity breaches, take effect on June 19, 2026, and apply only to high-level cyber-incidents. The revision eliminates the requirement for cybersecurity centres (CKB) to submit cybersecurity regulations and incident response plans to the OAC, replacing this with twice-yearly reporting on operational results. For CKBs providing services to other organisations, staffing must now include mandatory specialists in malware analysis and security effectiveness assessment. The order introduces detailed regulation of cybersecurity audits and security assessments to enable clients without specialist expertise to objectively evaluate service quality. Communication with the National Cybersecurity Centre (NCSC) may now occur via email and telephone, prioritising rapid response initiation. Information sharing about cybersecurity events and cyber-incidents with foreign or international organisations requires OAC coordination. Incident response teams must standardise their actions by recording all response measures in the cyber-incident information processing system, with compromise indicators preserved according to OAC recommendations. The National Cybersecurity Centre emphasises that cybersecurity requirements apply to every organisation in Belarus, as attackers target all entities; compromised organisations become tools for attacks on national information infrastructure. All changes take effect July 1, 2026.