I. Introduction
Over the past decade, cyber operations have increasingly been
used as instruments of geopolitical competition and statecraft,
particularly in ways that avoid open confrontation while still
producing strategic pressure.
They often remain below the threshold of armed conflict, yet
still disrupt services, weaken public confidence, and influence
decision-making during crises. This shifts critical infrastructure
protection from a technical issue to one of national resilience and
corporate risk.
In this context, cybersecurity obligations in Türkiye,
which have been shaped through secondary legislation and
supervisory practice across sector-specific regulatory frameworks,
have been consolidated under Cybersecurity Law No. 7545
("the Law"), which entered into force on
March 19, 2025.
