On October 23, 2026, Prime Minister Serhii Koretskyi instructed the heads of all executive bodies to “urgently form cybersecurity teams, procure software and put it into operation”.
“Russia is hitting our digital infrastructure as systematically as our energy sector,” the Prime Minister said.
Cybersecurity teams: what we know about the order
- What was ordered. Urgently form cybersecurity teams, buy protective software and put it into operation. However, the government did not publish specific deadlines or a decision number.
- Why now. According to Koretskyi, about ten data centers in Kyiv were damaged in September alone. Cyberattacks are growing, and the enemy increasingly uses artificial intelligence.
- Who is targeted. The main targets are state information systems and Ukrainian businesses.
- What the government expects. “Key digital bodies already know how to repel AI-powered attacks. I expect the same readiness from every state institution,” the Prime Minister stressed.
What authorities will face
Forming a team and buying software is only the first step. In practice, institutions will have to solve several tasks at once:
- People. The market lacks qualified cybersecurity specialists, and training your own takes time.
- Lawful protection tools. The public sector cannot use just any software. It must have a valid TPI expert opinion and must not appear on the list of banned software and equipment, which SSSCIP has expanded to more than 880 items.
- A system, not separate programs. Protective software must work within an information security system (ISS) that you need to design and authorize under the new legal requirements.
- Inspections. SSSCIP already checks compliance with a new control methodology. Therefore, a formal approach will end in orders to fix violations.
Businesses should prepare too
The order applies to authorities, but the Prime Minister directly named businesses as one of the main targets. The same AI-powered attacks and the same strikes on data centers also threaten banks, medical facilities, energy and logistics companies.
Read also: Kyiv data centers under attack: why government services survived; The SSSCIP list of banned technologies reaches 880 items; Law No. 4336-IX: first results and a new era of ISS.
How S-byte can help you build cybersecurity teams and systems
- Information security audit. We assess your current protection and decide what to buy and configure first.
- Turnkey ISS building and authorization. We design the system, prepare documents and support the authorization.
- Supply and deployment of protective software. We protect workstations and servers with ESET and Bitdefender, and networks with Fortinet, Cisco and our other vendor partners.
- State TPI expertise. S-byte has already completed expertise for Cisco equipment and the RSA ID Plus E3 platform, so we know how to prepare solutions for the public sector.
- Technical support with SLA. Our specialists strengthen your team while you build your own.
- Cloud solutions and data protection. We set up backups so that a strike on a data center does not stop your work.
Has your institution received the order but has no team or tools yet? Contact S-byte, and we will help you go from an audit to a working protection system.