ERP Systems: Recognized as Critical Infrastructure with New Import Substitution Obligations

Authorities are planning to classify ERP systems as critical information infrastructure. Additionally, there may be penalties for companies that do not transition to Russian software. This was reported by the RBC publication. The Ministry of Digital Development of the Russian Federation confirmed that this issue is related to the preparation of subordinate legislation following amendments passed in April 2025. The ministry emphasizes that ERP systems are crucial for the sustainable operation of businesses, thus they should be included in the list of critical infrastructure. As of the time of writing, relevant agencies are in the process of compiling this list.

For critical infrastructure facilities, the use of domestic solutions will become mandatory, and violations of this requirement will result in accountability. Details of these measures are still under discussion.

One RBC source indicated that a progressive tax scale is being considered for those who fail to switch to Russian ERP systems on time, although a final decision has yet to be made. Amendments to the law will take effect on September 1, granting the government the authority to assign significance categories to infrastructure facilities. Previously, this was the responsibility of the owners. Officials believe many owners intentionally avoided assigning the highest category to circumvent related requirements.

According to Nikolai Komlev, head of APKIT, 25–30% of Russian companies are using foreign ERP systems, primarily SAP and Oracle. The remaining 70–75% rely on domestic solutions, with around 80% of those being 1C. Other systems—including «Galaktika ERP», «Turbo ERP», and Global ERP—share the rest of the market.

In June, the government tasked the Ministry of Digital Development with proposing ideas for creating a consortium focused on developing a national ERP by the fourth quarter. This was prompted by a statement from Alexei Mordashov, the main beneficiary of «Severgroup», who noted that the group has not yet found a replacement for SAP.

A representative from the Ministry explained that the consortium will work on defining key system requirements to expedite the implementation of Russian solutions.

According to Vladimir Egorov, deputy general director of «Konsist Business Group», large companies have not fully abandoned SAP so far, as only certain functions are being replaced. This was echoed by Renat Chernys, commercial director at 1C department of «Korus Consulting». Among companies with revenues exceeding 50 billion rubles, there are no examples of complete transitions; the replacements are occurring gradually.

A source from RBC pointed out that SAP remains in use by «Severstal» (part of «Severgroup»), VTB, «Aeroflot», Vnukovo, «Sibur Holding», major telecom operators, and others. A representative from VTB stated that the bank continues to aim for import substitution. A representative from «Severstal» acknowledged the necessity of transitioning but noted that Russian ERP systems do not yet meet all requirements, such as the speed of report closures and planning quality.

Nikolai Komlev of APKIT emphasized that ERP systems are the «heart» of an enterprise, containing confidential information and becoming targets for attacks. Without regular updates, vulnerabilities accumulate. He believes that the new measure will help accelerate the shift to domestic solutions, although he noted that lagging industries often devise excuses to postpone transitioning.

Renata Abdullina, head of the Association of Major Software and Equipment Consumers, stressed the need for Russian ERPs to achieve compatibility with operating systems and database management systems. However, she noted that implementation costs remain high and performance insufficient.

At «T2 RTC Holding» (brand T2), SAP has already begun to be replaced, according to Dmitry Popov, head of IT development at the operator. He estimates that the transition could take three to five years, and longer for the largest enterprises.

MTS, «VimpelCom» (brand «Beeline»), and Vnukovo declined to comment.

Alexey Stoyanov, director of the Enterprise Management Competence Center at T1 Holding, pointed out that ERPs hold data on personnel, supplies, and production. He believes that stricter requirements will accelerate the transition to safer solutions.

A representative from the «Galaktika» corporation also supported the initiative, asserting that the transition away from SAP needs to happen quicker, as technical support is no longer available and risks are on the rise.

Dmitry Popov from «T2 RTC Holding» argued that there is no need to accelerate timelines forcefully. He mentioned that the continued operation of legacy ERPs does not hinder the achievement of key tasks, with the main risk lying in the lack of technical support, which can be mitigated by cybersecurity measures.

Renat Chernys from «Korus Consulting» cautioned that without balancing business interests, these measures would not be effective. He stated that the substitution process requires methodology, architecture, teams, and IT support; otherwise, the transition could be merely superficial.

Mikhail Bocharov, deputy general director for science at «SiSoft Development», noted that many companies create a façade of substitution while continuing to operate on outdated solutions. He opined that granting critical infrastructure status alone will not hasten replacement.

Bocharov contended that while such status would bolster regulatory authority, it would not resolve issues like workforce shortages, migration complexities, or the scarcity of ready-made solutions. This status would only be effective with government backing and realistic deadlines; otherwise, a new wave of superficial compliance could emerge.