The document introduces a new mechanism: if an economic entity fails to take the necessary measures to ensure the security of critical infrastructure, violates established requirements, creates a threat to the security or normal operation of a facility, or fails to restore its operation following an incident, temporary administration may be imposed over its assets.
The decree specifically mentions cases involving the ineffectiveness of measures directly aimed at preventing threats of attacks involving unmanned aerial vehicles (UAVs).
What does this mean for owners of industrial and infrastructure facilities, and why is protection against UAV threats increasingly becoming part of an overall security system?

What Changed After the Adoption of Decree No. 604

Decree No. 604 does not introduce the automatic transfer of a business to state control simply because it lacks an anti-drone system.
The mechanism works differently.
If an economic entity fails to take, or fails to take in a timely manner, measures to ensure the security of a facility, violates established requirements, creates a threat to its security or normal operation, or fails to restore the facility's operation following an incident, a decision may be made to introduce temporary administration.
Such a decision is made by the Government of the Russian Federation pursuant to an instruction from the President.
Temporary administration may also extend beyond an individual facility. The decree provides for the possibility of applying it to all or part of the movable and immovable property of an economic entity located in Russia, as well as its securities, ownership interests in Russian legal entities, and property rights.
Therefore, the primary significance of the new document is the signal it sends: the security of critical facilities is becoming not only a technical issue, but also a management responsibility.

Who Is Affected by the New Rules

The list of facilities classified as critical infrastructure under the decree is quite broad.
It includes:
→ fuel and energy sector facilities;
→ industrial facilities;
→ communications facilities;
→ municipal infrastructure;
→ transport and logistics infrastructure;
→ energy facilities, including nuclear power facilities;
→ life-support infrastructure;
→ critical and potentially hazardous facilities;
→ other facilities of particular importance to security, economic stability, and the functioning of society.
Thus, the issue is not limited to any single industry.
The focus is on enterprises where disruption to a facility could have consequences not only for the company itself, but also for infrastructure, the economy, or the normal functioning of society.

Why Does the Decree Specifically Mention UAVs?

Modern threats to industrial and infrastructure security can no longer be considered solely in terms of ground-based perimeter protection.
Unmanned aerial vehicles can approach and affect a facility from the air, meaning that conventional physical security measures may not be sufficient.
This is why Decree No. 604 specifically refers to the ineffectiveness of measures aimed at preventing threats of attacks involving UAVs.
This is an important distinction.
The document does not state that every facility must install a specific type of equipment.
Instead, it establishes something different: if security measures are implemented but prove ineffective in practice, this may be taken into account when assessing whether an economic entity is fulfilling its obligations to ensure the security of the facility.
In other words, simply having security equipment in place does not necessarily mean that the security challenge has been resolved.

Why “Installing Equipment” Is Not Enough

Protecting a facility against UAV threats is not about installing a single device on the premises.
Every facility has its own characteristics:
→ size and configuration of the site;
→ location of critical areas;
→ elevated structures;
→ industrial buildings and structures;
→ specific radio-frequency conditions;
→ potential approach routes;
→ requirements for uninterrupted production;
→ existing security systems.
Therefore, the same solution cannot be equally effective at a factory, oil storage facility, warehouse complex, energy facility, or transport infrastructure site.
The first step is to understand what exactly needs to be protected and against which threats.
Only then should appropriate technical solutions be selected.

How an Effective Protection System Should Be Built

Effective protection requires a comprehensive approach.
The first stage is a detailed assessment of the facility and identification of its vulnerabilities.
A protection concept is then developed based on the characteristics of the site and potential threat scenarios.
The appropriate technical solutions are subsequently selected and integrated with the facility's existing security infrastructure.
But the process does not end there.
The system must be commissioned and tested under real-world conditions, while facility personnel must understand the procedures to follow if a threat arises.
The complete process can therefore be represented as:
site assessment → vulnerability analysis → system design → equipment selection → installation → commissioning → testing → personnel training.
This approach makes it possible to view counter-UAS protection not as a standalone device, but as an integral part of the facility's overall security system.

What Facility Owners Should Do Now

Decree No. 604 does not mean that every enterprise must immediately install an identical set of equipment.
However, it makes another question particularly important:
How effectively can the facility's existing security system withstand modern threats?
For enterprises that are part of critical infrastructure, several areas deserve particular attention.

1. Assess the Current Level of Protection

It is necessary to determine which areas of the facility are most vulnerable and what protective measures are already in place.
It is important to assess not only whether equipment exists, but also how effectively it operates as part of the overall security system.

2. Identify Vulnerabilities

Even an installed system may have limitations.
The assessment should take into account the characteristics of the site, the radio-frequency environment, the location of protected facilities, and potential threat scenarios.

3. Develop an Integrated Solution

Protection must be tailored to the specific facility.
Depending on the task, different technical means of UAV detection, monitoring, and countermeasures may be used and integrated into a unified system.

4. Train Personnel

Even a technically equipped facility ultimately depends on the actions of its employees.
Personnel must understand how a threat is identified, who is responsible for decision-making, and what actions must be taken in the event of an emergency.

5. Regularly Assess Effectiveness

Security is not a project that ends once equipment has been installed.
Technologies, operating conditions, and the nature of threats continue to change. The system therefore needs to be assessed periodically and adjusted when necessary.

What Decree No. 604 Means for Businesses in Practice

The main conclusion of the document is not that the state has acquired the power to “take over enterprises for not having drones.”
Such a description would be incorrect.
The decree provides for the possibility of introducing temporary administration over certain assets when the grounds specified in the document are present. One of these grounds is the ineffectiveness of measures directly aimed at preventing threats of attacks involving UAVs. The decision is made by the Government pursuant to an instruction from the President.
For owners of critical facilities, this means that UAV protection is becoming part of a broader task — ensuring the resilience and security of the facility itself.
At the same time, it is essential not simply to purchase equipment, but to understand what task it is intended to solve, how it will operate as part of an integrated system, and who will be responsible for actions in the event of a threat.

How Counter-UAS Protection Is Implemented in Practice

Comprehensive protection does not begin with selecting a specific device.
First, specialists assess the facility, analyze its vulnerabilities, and identify potential threat scenarios.
A solution is then developed, the appropriate equipment is selected, and installation and commissioning are carried out.
Personnel training is given particular attention: employees must understand how to operate the system and how to act in accordance with established procedures.
This approach makes it possible to create a solution tailored not to an abstract “facility,” but to a specific enterprise, its site, infrastructure, and security requirements.

ALANDR PRO: A Comprehensive Approach to Facility Protection

ALANDR PRO works on comprehensive security projects for industrial and infrastructure facilities.
The process begins with a facility assessment and vulnerability analysis, after which a solution is developed based on the specific conditions of the site.
The scope of work may include:
→ site assessment;
→ vulnerability analysis;
→ security system design;
→ equipment selection and supply;
→ installation and commissioning;
→ personnel briefing and training.
The core principle is not to install equipment for the sake of having equipment, but to create a system that corresponds to the specific risks and operating conditions of the facility.

What Should Be Done Now

Decree No. 604 came into force on August 24, 2026.
For enterprises operating critical infrastructure, this is another reason to review their existing security systems.
Not after an incident.
Not after receiving an official order.
And not after discovering that the installed equipment does not solve the task it was intended to address.
Instead, the process should begin in advance — with a facility assessment, vulnerability analysis, comprehensive security system design, and personnel training.
Facility security does not begin with purchasing equipment. It begins with understanding the threats and properly organizing the entire protection system.