Uzbekistan’s president has approved Cybersecurity Strategy for 2026–2030.

A cyber incident response system will be created in Uzbekistan, and cybersecurity departments will be established within government agencies. To combat phone fraud, an anti-phishing platform and a spam call filtering system will be introduced. It will also become possible to submit cybercrime complaints online.

On March 10, President Shavkat Mirziyoyev signed a decree approving the Cybersecurity Strategy for 2026–2030. The document outlines several key priorities:

• protecting critical information and state digital infrastructure;
• systematically reducing cyber threats and improving the digital security of citizens, the private sector, and the government;
• combating cybercrime;
• developing digital innovations and artificial intelligence technologies in the field.

The strategy also emphasizes achieving technological independence in cybersecurity.

A National Coordinating Council on Cybersecurity and Combating Cybercrime will be established under the leadership of the Secretary of the Security Council under the President. By July 1, working groups from ministries and agencies will submit assessments of the cybersecurity status of digital government and banking-financial information systems to the council.

Government agencies that do not have their own information security divisions will be allowed to outsource these functions to external contractors. However, they may only cooperate with companies included in a special registry maintained by the State Security Service.

In addition, the State Security Service will organize vulnerability detection competitions involving independent experts to improve the resilience of national information systems and resources against modern cyberattacks.

Cybersecurity Departments in Government Agencies

Starting from April 1, specialized cybersecurity units consisting of at least four employees will be established within the Ministry of Justice, the Ministry of Energy, and the Tax Committee.

Cybersecurity structures must also be formed within the existing staffing frameworks of several other state organizations, including agencies related to migration, energy efficiency, defense industry, civil aviation, innovation development, archives, consumer rights protection, youth affairs, and Oʻzbekgidroenergo.

The personal responsibility of government officials for implementing cyber protection measures will be strengthened. Liability for violating cybersecurity legislation will also become stricter.

Beginning April 1, government agencies will be required to allocate funding for cybersecurity from both budgetary and extra-budgetary resources.

Infrastructure

A national SOC (Security Operations Center) system for monitoring and responding to cybersecurity incidents is being established. Systems for detecting vulnerabilities and weaknesses will be implemented in government information systems, resources, and critical information infrastructure facilities.

A rapid information exchange mechanism regarding new cyber threats and vulnerabilities will also be launched, along with a notification system for cybersecurity stakeholders.

Combating Cybercrime

Law enforcement agencies are expected to strengthen efforts to prevent, detect, and solve cybercrimes. According to the strategy, the readiness level of rapid response teams handling cyberattacks must be continuously improved.

Higher education institutions affiliated with law enforcement agencies will train cybercriminalistics specialists. Modern operational-search and investigative methods will also be actively introduced to improve cybercrime investigations.

Digital forensics capabilities will be expanded within law enforcement agencies, including the establishment of specialized laboratories, systems for collecting and analyzing digital evidence, and the development of new investigative technologies and methodologies.

A cyber laboratory will also be created within the Ministry of Internal Affairs to provide information-technical support for operational activities.

Law enforcement agencies will be responsible for preventing online fraud and informing citizens about cybercrimes. The process of submitting cybercrime reports and complaints, including through online services and specialized platforms, will also be simplified.
 

Public Awareness and Cyber Culture

Regular training sessions for government employees and public information campaigns for citizens are planned. Through media and educational materials, the public will be informed about the basic principles of cybersecurity.

Cybersecurity legislation will also be revised. Penalties for crimes committed using information technologies will become stricter, and separate legal norms will be introduced for new types of cyber offenses.

A separate section of the strategy focuses on combating phone and internet fraud. Authorities plan to develop an anti-phishing platform capable of automatically detecting fraudulent websites. Mechanisms for identifying, blocking, or warning users about suspicious calls will also be introduced.

Telecommunication operators may be required to block or filter suspicious and unwanted calls, including spam and advertising calls.

Cyber Education

Cyber culture lessons will be introduced in upper school grades as part of educational programs.

By the end of 2026, authorities plan to develop online platforms offering cybersecurity fundamentals courses and produce social awareness videos for students and schoolchildren.

Cybersecurity clubs will also be established across regions to support talented youth. 

Manba: gazeta.uz