Cybersecurity of Critical Infrastructure in Ukrainian Legislation and in Directive (EU) 2022/2555

The article presents industries, sectors and the main criteria for determining critical facilities cyber security of which is subject to special control, in particular, by state authorities. World-known approaches to defining critical infrastructure and requirements for its cyber security are also presented. The main provisions of Directive (EU) 2022/2555, known as NIS2, and its differences from the previous NIS directive are analyzed. The classification of facilities, industries and sectors with special cyber security control are shown. The expansion in relation to previous provisions was considered for comparison with Ukrainian legislation and practice in order to further assess the scope and directions of work on the harmonization of Ukrainian legal acts with documents of the European Union.