Law on security of critical information infrastructure

Source: International Energy Agency
Last updated: 12 June 2025
The law applies to Russian legal persons and individual entrepreneurs owning or operating information systems, networks, or automated control systems in the field of power and the fuel and energy complex. They must categorize their information systems, implement security measures as mandated by the authorized federal body for significant objects, participate in the state system for detecting and responding to cyber incidents, and potentially install and utilize specific security tools.

Want to know more about this policy ? Learn more