State policy of information security under hybrid threats

Abstract

The relevance of this study is driven by the escalating scale and complexity of hybrid threats that systematically target state institutions, society, and Ukraine's critical information infrastructure. The purpose of the research is to theoretically substantiate the systemic foundations of forming Ukraine’s state information security policy and to develop a model of strategic governance under hybrid threats, taking into account media ecosystem factors, digital diplomacy, cyber defence, and societal resilience. The methodological framework encompasses systemic and structural-functional approaches, methods of strategic and comparative analysis, institutional modeling, risk-oriented assessment, content analysis, and formalized indicative forecasting techniques. The research also uses statistical comparisons of international cyber-readiness and digital development indices. The results confirm the development of Ukraine’s core capabilities in information and cybersecurity, including digital infrastructure, STRATCOM institutions, cyber incident response mechanisms, and instruments to counter disinformation. At the same time, several structural challenges were identified, including uneven development of network infrastructure, insufficient deployment of DNSSEC and IPv6, limited human resources, and a need to strengthen media and digital literacy. A multi-level «state – society – infrastructure» information resilience model is substantiated, and a phased algorithm for developing a comprehensive information security strategy is proposed, encompassing threat diagnostics, strategic planning, regulatory support, institutional strengthening, digital modernisation, and international cooperation. Future research prospects include developing a national information threat matrix, tools for assessing societal media resilience, modelling hybrid threats using OSINT- and SIGINT-based approaches, and designing mechanisms to integrate international cybersecurity standards into Ukrainian public governance practice.