Businesses will not put CII security above profit - the Ministry of Digital Development Businesses are not always willing to independently provide the level of protection required for critical information infrastructure (CII), because they are primarily interested in making money. Therefore, the state must establish cyber security rules for essential industries, said Grigory Selnikov, Acting Director of the Cyber Security Department at the Ministry of Digital Development, at the SOC forum. "The mission of a business is to make money, so the issue of security is always second or third in order," he noted. According to Selnikov, we are mainly talking about the industries on which the citizens' daily lives depend: transportation, energy, water supply and services. The state must guarantee a certain level of their security and intervene when the businesses are not ready to independently provide the required security. To increase the effectiveness of cyber defense, it is also necessary to create interaction between IT departments and information security specialists. According to Selnikov, such processes require clear rules, agreed technical solutions and regular intersectoral exercises. PSB Operational Support and Transformation Manager Evgeniy Buryakov also believes that joint exercises will help improve CII's safety regulation. In his opinion, the initiative to manage them should come from the state.