ABSTRACT. The scope of information infrastructures underpinning business operations and technological processes within Azerbaijan’s national security sectors is rapidly expanding. These infrastructures are essential for ensuring operational continuity and resilience, with any compromise posing a risk of significant disruption and damage. Consequently, safeguarding these infrastructures has become a core priority within the nation’s broader information security strategy. To this end, substantial measures, including enhanced legal regulations, have been implemented to strengthen the security of infrastructures deemed critical, as well as the information systems, communication networks, and automated management systems vital to the interests of the state, society, and its citizens. This article examines the legal frameworks established for the protection of critical information infrastructure (CII) in Azerbaijan, while also identifying areas needing further development and optimization.