The article is devoted to information security issues in the world and in Azerbaijan, in particular. The article compares laws and regulations of Azerbaijan and other countries in the cybersecurity policy between them. The article reveals the features of the organisational and legal regulation of the information security system as an integral part of state security. A number of aspects of ensuring information security through legal and technological means, as well as a number of features of ensuring the security of certain categories of information, are highlighted. Recommendations and conclusions from the policies of both jurisdictions are presented.