Cabinet Resolution No. 594: Cybersecurity Specialists in State Bodies Must Upgrade Their Qualifications at Least Once Every Two Years

Cybersecurity specialists in state bodies and state-owned companies must upgrade their qualifications at least once every two years. Training will be delivered by the state-run Cyber University.

The procedure was approved by Cabinet Resolution No. 594 of 28 October 2026 "On measures to introduce a system for training and retraining personnel in the field of cybersecurity". It took effect on 30 October 2026.

Who is covered

• state bodies and organizations;
• legal entities in which the state holds 50% or more of the charter capital.

What the resolution provides

The resolution approves a Regulation on upgrading qualifications and retraining personnel in cybersecurity. It sets out how courses are organized, the rights and duties of trainees, and how final exam results can be appealed.

• qualification upgrades — at least once every two years;
• training is delivered by Cyber University;
• costs are covered from the off-budget funds of the organization or its parent body, and other sources not prohibited by law.

Foreign certificates

Specialists holding a foreign cybersecurity certificate recognized in Uzbekistan are not sent for qualification upgrades while the certificate is valid. The list of recognized certificates and their validity periods is to be approved by the Ministry of Digital Technologies. Until it is approved, it is not defined which certificates qualify for the exemption.

What this means in practice. Heads of state bodies and of companies with a state share of 50% or more should draw up a training schedule for their cybersecurity staff and include the costs in the organization's budget. Those with foreign certificates should wait for the Ministry's list and check whether their certificate is on it.

Photo: Farruh Samadov, Wikimedia Commons (CC BY-SA 4.0)