On March 10, President Shavkat Mirziyoyev signed a decree approving the Cybersecurity Strategy for 2026-2030. The decree outlines several key areas:

• protecting critical information infrastructure and government systems;
• reducing cyber risks for individuals, businesses, and the state;
• countering cybercrime;
• developing domestic technologies, including AI.

Specifically, the goal of technological independence in cybersecurity is highlighted.

A National Coordination Council for Cybersecurity and Countering Cybercrime has been established, chaired by the Secretary of the Security Council under the President of Uzbekistan. By July 1, working groups from ministries and agencies will have to file to the council an assessment of the state of cybersecurity in information systems in the digital government and banking and financial sectors.

Government agencies that do not have their own information security departments will be allowed to outsource these functions. However, they will only be able to work with companies listed in a special registry maintained by the State Security Service.

Furthermore, the State Security Service will hold contests involving independent experts to identify vulnerabilities in national information systems and resources to increase their resilience to modern cyberattacks.

Starting April 1, specialized cybersecurity units with at least four employees will be set up in the Ministry of Justice, the Ministry of Energy, and the Tax Committee.

• Cybersecurity units will have be formed within the existing staffing levels in a number of government agencies, including:
• Committee for Industrial, Radiation, and Nuclear Safety;
• Migration Agency;
• National Agency for Energy Efficiency;
• Department of Migration and Personalization of the Ministry of Internal Affairs;
• Agency for Defense Industry under the Ministry of Defense;
• Civil Aviation Agency under the Ministry of Transport;
• Agency for Innovative Development under the Ministry of Higher Education, Science, and Innovation;
• Uzarhiv Agency under the Ministry of Justice;
• Committee for the Development of Competition and Consumer Protection;
• Agency for Youth Affairs;
• Uzbekhydroenergo.

Starting April 1, government agencies must contribute funds for cybersecurity from the budget and their extra-budgetary funds.