Cybersecurity of Critical Infrastructure: Legal Accountability and Technological Challenges in the Digital Era

Abstract

Critical infrastructure has become increasingly dependent on interconnected digital technologies, creating new opportunities for efficiency while simultaneously increasing exposure to sophisticated cyber threats. Energy networks, telecommunications, banking systems, transportation, healthcare facilities, water systems, and public-service platforms increasingly rely on information technology and operational technology. A successful cyberattack against such infrastructure can cause consequences extending beyond data loss, potentially disrupting essential services and creating physical, economic, and social harm. This article examines the technological and legal challenges associated with cybersecurity of critical infrastructure. It focuses on ransomware, supply-chain attacks, operational technology vulnerabilities, incident response, data protection, cybersecurity standards, organizational responsibility, and liability. The article argues that traditional cybersecurity approaches focused primarily on information confidentiality are insufficient for infrastructure where availability, safety, and operational continuity are equally important. It proposes a technology-oriented governance framework based on security-by-design, continuous monitoring, network segmentation, incident reporting, vulnerability management, access control, and coordinated public-private oversight. The article concludes that effective protection of critical infrastructure requires integration of advanced cybersecurity technologies with clear legal duties, institutional accountability, and continuous risk assessment.