Аңдатпа
[Purpose] The purpose of the research was to identify patterns in the development of legal regimes in the field of cybersecurity in relation to the escalation of threats and the transformation of cyber incidents. [Methodology/approach/design] A set of methods was applied to achieve the stated objective: historical-legal analysis revealed the evolution of regulatory approaches from the first international agreements to modern regulatory initiatives; the comparative method enabled the juxtaposition of regulatory models in the European Union, the United States, and the Asia-Pacific region; case studies established the role of key cyber incidents as catalysts for legal reforms; the periodisation method, in turn, allowed for structuring this evolution, identifying four consecutive stages of legislative development. [Findings] The first stage (1980-2000) laid the foundations for criminalising such acts as unauthorised data access, computer fraud, and interference with information systems. The second stage (2005-2015) was characterised by a shift from technical response to the political-legal conceptualisation of incidents and the formation of national digital security strategies. The third stage (2016-2020) was associated with the institutionalisation of regulatory standards for transparency and accountability. The fourth stage (2020-present) reflects a transition to comprehensive regulation amidst growing military and technological threats, including the use of artificial intelligence. The research findings demonstrated the dependence of legal regime development on large-scale incidents and confirmed the growing role of preventive regulation. [Practical implications] The obtained results can be used in the development and enhancement of cybersecurity strategies, the formulation of regulatory acts in the European Union and other jurisdictions, as well as in the preparation of operational procedures for responding to cyber incidents in public and private institutions.