Kazakhstan's Ministry of Digital Development Releases Updated Cybersecurity Recommendations

Executive Summary

The government of Kazakhstan has taken a proactive step to bolster its national cybersecurity posture by releasing an updated set of recommendations for citizens and organizations. Published on December 23, 2025, by the Ministry of Digital Development, Innovation and Aerospace Industry (MAIDD), the new guidelines focus on fundamental cyber hygiene and personal data protection. The release is timely, as a recent study highlighted a significant increase in public awareness of cyber threats, which rose to 86% in 2025. The nation's efforts are also reflected in its improved ranking in the Global Cybersecurity Index.

Policy Overview

The MAIDD's updated recommendations are part of Kazakhstan's ongoing strategy to create a safer digital environment. The guidelines are not strict regulations but rather a set of best practices intended to promote better security habits among the populace. The key recommendations include:

• Use of Encryption: Encouraging the use of encryption to protect data both in transit and at rest.
• Data Minimization: Advising citizens to limit the amount of personal information they share publicly online.
• Antivirus Protection: Stressing the necessity of installing and maintaining updated antivirus software on all devices.

This public awareness campaign is supported by a government-provided mechanism for reporting security incidents. Citizens can report cases of illegal data collection or data leakage through the e-Government portal or directly to the Information Security Committee (ISC).

Rising Awareness and National Standing

The government's focus on cybersecurity appears to be resonating with the public. A recent study cited in the announcement shows that citizen awareness of cyber threats has jumped from 62.9% in 2018 to 86% in 2025. This increased awareness is a critical component of national cyber defense, as informed citizens are the first line of defense against threats like phishing and scams.

These national efforts have also been recognized internationally. Kazakhstan has improved its position in the International Telecommunication Union's (ITU) Global Cybersecurity Index, now placing in the "Advancing" tier with a high score of 94.4 out of 100. This indicates a strong commitment to developing and implementing effective cybersecurity policies and capabilities.

Impact and Guidance

For citizens and businesses in Kazakhstan, these recommendations serve as a clear and actionable guide to improving their digital security. Adhering to these guidelines can significantly reduce the risk of falling victim to common cyberattacks. The establishment of a formal reporting channel empowers individuals to take action when they suspect their data has been mishandled, fostering a culture of accountability.

For the government, this initiative represents a soft-power approach to cybersecurity, focusing on education and empowerment rather than solely on punitive regulation. By raising the overall level of cyber hygiene across the country, Kazakhstan aims to make itself a harder target for cybercriminals and other malicious actors.