
The transition of objects of critical information infrastructure (kii) to the predominant use of domestic software and equipment should be phased, and the planned terms of import substitution must be reviewed. This is stated in the conclusion of the commission of the Russian Union of Industrialists and Entrepreneurs (RSPP) on communication and information and communication technologies.
Recall that the Kia Safety Law entered into force on January 1, 2018. К объектам критической инфраструктуры он относит информационные системы и информационно-телекоммуникационные сети госорганов, а также автоматизированные системы управления технологическими процессами в оборонной индустрии, в здравоохранении, связи, на транспорте, в кредитно-финансовой сфере, энергетике и в ряде отраслей промышленности (топливной, атомной, ракетно-космической, металлургической, химической, mining). In addition, organizations in the field of science are included in the list of KII objects. Finally, the document distributes the facilities of KII into categories in social, political, economic significance, as well as "significance to ensure defense capacity, state security and law and order."
In early November, the Ministry of Council proposed to extend the terms of import substitution for KII facilities - if earlier owners of KII objects proposed to be obliged to switch to the predominant use of domestic software from January 2021, and domestic equipment from January 2022, then in the modified draft of the corresponding decree of the president these terms were transferred to the 2024th and 2025, respectively. The document also says that the subjects of the KII are required to conduct an audit of foreign software and, until July 1, 2021, approve the transition to domestic software.
In mid -November, the Chairman of the Board of the Association of Developers of Software Products (ARPP) "Domestic Software" Natalya Kasperskaya and Executive Director of the Association of Russian Developers and Electronics Manufacturers (Arpe) Ivan Pokrovsky asked President Vladimir Putin not to transfer for three years the terms of transition of KII facilities to domestic equipment and software.
In the RSPP, it is believed that the transition should not be started with software, but with equipment, since otherwise companies will have to install Russian software on foreign equipment, but in a year to transfer this software to new Russian devices and adapt to them. Instead, according to the RSPP, it is necessary to put the equipment in stages first, taking into account the terms of wear of the equipment used, Kommersant writes.
In the conclusion, it is also noted that imported software and equipment are used at KII facilities, since they have no Russian analogues, or these analogues are significantly inferior to foreign decisions. For this reason, import substitution plans create the risks of stopping business processes and the provision of mass services in the field of communication, Internet services, banking, medicine, etc. In addition, in order to fulfill the requirements, companies will have to change investment plans due to additional expenses for the replacement of equipment and software.