TRANSFORMATION OF INTERNATIONAL CYBERSECURITY STANDARDS AS A RESPONSE TO TECHNOLOGICAL AND GEOPOLITICAL CHALLENGES

Abstract

The article is aimed at analyzing the transformation of international cybersecurity standards (ISO/IEC 27001, NIST Cybersecurity Framework, GDPR) as a response to technological (AI, IoT, 5G) and geopolitical challenges (state-sponsored cyberattacks, regulatory fragmentation).The study aims to identify key areas of evolution of standards, assess their adaptation to current threats, and suggest ways to improve global cyber resilience through cross-sectoral cooperation.The study is based on the analysis of verified data from reputable sources, including IBM Security Cost of a Data Breach 2024, ENISA 2023, Verizon DBIR 2024, Microsoft Threat Intelligence Report 2023, as well as official documents of international organizations (EU, NIST, ISO). A systematic approach was used to assess technological, geopolitical and regulatory factors affecting cybersecurity standards. A comparative analysis of standards (ISO/IEC 27001:2022, NIST CSF 2.0, GDPR, NIS2) allowed us to identify their updates and limitations. Additionally, cross-sectoral cooperation initiatives such as the Cybersecurity Tech Accord and the ENISA MeliCERTes platform were analyzed to assess their role in the implementation of standards.The article offers a comprehensive analysis of the transformation of cybersecurity standards with a focus on their adaptation to new technological threats (AI, IoT) and geopolitical realities (state-sponsored attacks). The novelty lies in the consideration of cross-sectoral cooperation as a key mechanism for implementing standards, which has not been sufficiently covered in the literature. The study also systematizes standard updates (e.g., the “Govern” feature in NIST CSF 2.0, the integration of DevSecOps in ISO/IEC 27001:2022) and assesses their impact on global harmonization, highlighting the barriers associated with regulatory fragmentation.The transformation of international cybersecurity standards is necessary to counter modern threats. Updates to ISO/IEC 27001:2022 and NIST CSF 2.0 address risks from AI, IoT, and supply chains, while GDPR and NIS2 strengthen data protection and incident response. However, political differences, such as between Western and Chinese standards (GB/T), complicate global harmonization. The human factor, which accounts for 68% of data breaches, calls for increased cyber literacy. Cross- sectoral cooperation, such as the ENISA and CISA initiatives, is critical to the practical implementation of standards. In the future, cyber resilience will depend on flexible standards, coordination between states, the private sector and international organizations, and investment in education and technology.