The Government has strengthened requirements for critical infrastructure facilities.

By Resolution No. 337 dated March 6, 2026, the Cabinet of Ministers significantly amended the rules governing the operation of critical infrastructure facilities (CIFs). From now on, the use of facsimile signatures is strictly prohibited on key documents, including security passports, protection plans, and categorization materials.

The list of grounds for removing a facility from the sectoral register has been expanded to include the operator’s failure to provide requested information within 30 days and refusal to undergo repeated categorization. The list of critical sectors has also been officially expanded to include the defense industry, cloud services, data centers (DCs), and the state registration sector.

A dedicated commission will carry out systemic monitoring of the protection status of CIFs once every three years. In addition, personnel requirements have been tightened: the person responsible for protection must be at least at the level of a deputy head or meet the professional standards established by the State Service of Special Communications and Information Protection.