Pursuant to the Decree of the President of the Republic of Azerbaijan dated 2 June 2026, the National Cybersecurity Agency has been established as a public legal entity under the Ministry of Digital Development and Transport of the Republic of Azerbaijan on the basis of the Electronic Security Service operating under the Ministry.

The National Cybersecurity Agency is a public legal entity that exercises regulation and supervision in the field of cybersecurity in the country and, with respect to critical information infrastructures and information infrastructures owned by state bodies, facilitates information exchange, ensures enhanced resilience, and coordinates the activities of information infrastructure entities. Furthermore, except for information infrastructures owned by state bodies and critical information infrastructures, the Agency takes preventive measures to detect, investigate, and prevent actions aimed at compromising the cybersecurity of information infrastructures.

The Agency also ensures nationwide dissemination of information on existing and emerging cyber threats, promotes cybersecurity awareness among the population and public and private entities (users), and provides them with methodological support.

In addition, the Agency serves as the competent authority responsible for taking measures against the placement on Internet information resources of information whose dissemination is prohibited under the legislation, and for carrying out activities in the field of personal data protection.

Areas of activity:

• to participate in the formulation and implementation of state policy in the relevant field;
• to organize, coordinate and regulate activities in the relevant field in accordance with regulatory legal acts, and to exercise oversight over compliance with the regulatory legal acts in force;
• to coordinate the activities of information infrastructure entities in the field of cybersecurity, while, with respect to critical information infrastructures and information infrastructures owned by state bodies, performing only information exchange functions;
• to undertake preventive measures, in cooperation with the relevant authorities, to detect, investigate and prevent actions directed at compromising the cybersecurity of information infrastructures nationwide;
• to collect and analyse information from state authorities, sectoral computer emergency response centres, users, software and hardware manufacturers, similar bodies in other countries, and other sources on cyberattacks, cyber threats, cyber incidents, unlawful intrusions and malicious software (cyber threats) targeting information systems and networks, computer hardware and software, as well as local and corporate information systems and resources (with respect to critical information infrastructure security, via the competent authority responsible for ensuring such security);
• to ensure nationwide dissemination of information on existing and emerging cyber threats, to promote cybersecurity awareness among users and provide them with methodological support (with respect to high-category state bodies, protected persons, protected and strategic facilities, and information infrastructures owned by state bodies, through the relevant competent authority; and with respect to critical information infrastructure security, through the competent authority responsible for ensuring such security);
• to provide recommendations in the relevant field;
• to cooperate with other relevant institutions operating within and outside the Republic of Azerbaijan for the purpose of ensuring training in the relevant field;
• to take measures prescribed by law in cases involving the placement on Internet information resources of information the dissemination of which is prohibited;
• to take measures in cases involving the unlawful collection and processing of personal data and the failure to ensure their protection;
• to take appropriate measures, jointly with the relevant authorities, aimed at improving activities in the relevant field, enhancing the quality of services provided, increasing transparency, and supporting innovative ideas and projects;
• to take measures to develop and promote public-private partnership in the relevant field.