New Threats — New Rules: The Evolution of Russian Legislation in IT and Cybersecurity

This article analyzes the transformation of Russian legislation in the field of information technology and cybersecurity over the past five years. The author notes that the changing landscape of cyber threats, including the rise of supply chain attacks and threats to critical infrastructure, has forced the state to shift from formal compliance to ensuring genuine technological independence. The material examines the evolution of regulatory approaches: from protecting individual systems to implementing continuous monitoring and requirements for incident readiness in real-world operations. Special attention is paid to the issue of dependence on foreign technologies whose life cycles are outside Russian control. This publication is the third part of a series dedicated to analyzing attack methods, incident statistics, and state response measures aimed at strengthening the country's digital sovereignty in the face of modern challenges.