In Russia, the activities of white hackers will be legalized to check the security of information.

The draft law “On the activities of searching for vulnerabilities and assessing the level of security of information infrastructures of the Russian Federation…” is aimed at ensuring the technological sovereignty of the country, explained its author, a member of the Committee on Federation Council Affairs. Constitutional legislation and construction of the State, Artem Sheikin. He noted that with the increasing number and complexity of cyber attacks aimed at disabling critical information infrastructure facilities, it was necessary to introduce legal regulation of such activities.

The bill also provides liability for critical information infrastructure entities that fail to identify and eliminate vulnerabilities. For officials, it is proposed to establish fines in the amount of 20 to 50 thousand rubles, and for legal entities – from 100 to 500 thousand rubles.

According to Shteikin, the main goal of the bill is to establish the rights and responsibilities of participants in searching for vulnerabilities and assessing the level of security of information infrastructure facilities.

According to cybersecurity expert and former head of FinCERT of the Central Bank, Artem Sychev, now most regulators, with the exception of the Central Bank, do not have mechanisms to influence companies that do not comply with information security requirements. Sychev emphasized the importance of introducing liability for ignoring work to identify and eliminate vulnerabilities.

In 2023, more than 50,000 cyber attacks were recorded on Russian companies. Director of the Practical Security Laboratory Evgeniy Sobolev spoke with RB.RU about innovative ways to protect against cybercriminals.