{"id":52543,"date":"2019-11-11T00:00:00","date_gmt":"2019-11-10T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/zashhishhyonnoe-oblako-na-platforme-df-cloud"},"modified":"2020-02-18T14:00:18","modified_gmt":"2020-02-18T11:00:18","slug":"zashhishhyonnoe-oblako-na-platforme-df-cloud","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zashhishhyonnoe-oblako-na-platforme-df-cloud","title":{"rendered":"Ochrann\u00e1 cloudov\u00e1 platforma DF Cloud\u00a0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Z\u00e1kon \u010d. 152-FZ \u201eO ochran\u011b osobn\u00edch \u00fadaj\u016f\u201c se vztahuje na v\u0161echny existuj\u00edc\u00ed subjekty: fyzick\u00e9 a pr\u00e1vnick\u00e9 osoby, feder\u00e1ln\u00ed org\u00e1ny st\u00e1tn\u00ed moci a m\u00edstn\u00ed samospr\u00e1vy. Ve skute\u010dnosti se tento z\u00e1kon vztahuje na jak\u00e9koli organizace, kter\u00e9 zpracov\u00e1vaj\u00ed informace a osobn\u00ed \u00fadaje ob\u010dan\u016f RF, bez ohledu na formu vlastnictv\u00ed a velikost organizace.<\/p>\n<p>N\u011bkdy m\u016f\u017ee organizace ne\u010dekan\u011b zjistit, \u017ee m\u00e1 informace syst\u00e9my o osobn\u00edch \u00fadaj\u00edch (P\u00da) skryt\u00e9. Nap\u0159\u00edklad spole\u010dnost je pova\u017eov\u00e1na za oper\u00e1tora osobn\u00edch \u00fadaj\u016f, pokud m\u00e1 na sv\u00fdch str\u00e1nk\u00e1ch formul\u00e1\u0159e pro zp\u011btnou vazbu, registraci a dal\u0161\u00ed formul\u00e1\u0159e pro shroma\u017e\u010fov\u00e1n\u00ed \u00fadaj\u016f, podle kter\u00fdch lze identifikovat subjekt.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/datafort\/blog\/473774\/\"><img decoding=\"async\" alt=\"Ochrann\u00e1 cloudov\u00e1 platforma DF Cloud&nbsp;\" src=\"\/wp-content\/uploads\/2019\/11\/39f0586a02f44154859caf5655987bba.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nKontrolu a dozor nad dodr\u017eov\u00e1n\u00edm po\u017eadavk\u016f feder\u00e1ln\u00edho z\u00e1kona \u201eO osobn\u00edch \u00fadaj\u00edch\u201c vykon\u00e1vaj\u00ed regul\u00e1to\u0159i:<\/p>\n<ul>\n<li>Roskomnadzor ve vztahu k ochran\u011b pr\u00e1v subjekt\u016f osobn\u00edch \u00fadaj\u016f;<\/li>\n<li>FSB Ruska ve vztahu k pln\u011bn\u00ed po\u017eadavk\u016f v oblasti kryptografie;<\/li>\n<li>FSTEK Ruska ve vztahu k dodr\u017eov\u00e1n\u00ed po\u017eadavk\u016f na ochranu informac\u00ed p\u0159ed neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem a \u00fanikem prost\u0159ednictv\u00edm technick\u00fdch kan\u00e1l\u016f.<\/li>\n<\/ul>\n<p>\nJeliko\u017e z\u00e1kon \u010d. 152-FZ \u201eO osobn\u00edch \u00fadaj\u00edch\u201c je pouze z\u00e1kladem pr\u00e1vn\u00edho zaji\u0161t\u011bn\u00ed ochrany P\u00da, byly jeho po\u017eadavky d\u00e1le konkretizov\u00e1ny v aktech vl\u00e1dy Rusk\u00e9 federace a Ministerstva pro komunikaci a dal\u0161\u00edch normativn\u011b-metodick\u00fdch dokumentech regul\u00e1tor\u016f.<\/p>\n<h2>Feder\u00e1ln\u00ed org\u00e1ny reguluj\u00edc\u00ed \u010dinnost v oblasti zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f<\/h2>\n<p><\/p>\n<ul>\n<li><b>Roskomnadzor<\/b> (Feder\u00e1ln\u00ed slu\u017eba pro dozore\u010dn\u00e9 \u010dinnosti v oblasti komunikace a masov\u00fdch m\u00e9di\u00ed) \u2013 vykon\u00e1v\u00e1 kontrolu a dozor nad dodr\u017eov\u00e1n\u00edm z\u00e1konnosti zpracov\u00e1n\u00ed P\u00da.<\/li>\n<li><b>FSTEK Ruska<\/b> (Feder\u00e1ln\u00ed slu\u017eba pro technick\u00fd a exportn\u00ed dozor) \u2013 stanovuje metody a prost\u0159edky ochrany informac\u00ed za pou\u017eit\u00ed technick\u00fdch prost\u0159edk\u016f.<\/li>\n<li><b>FSB Ruska<\/b> (Feder\u00e1ln\u00ed slu\u017eba bezpe\u010dnosti RF) \u2013 stanovuje metody a prost\u0159edky ochrany informac\u00ed v mez\u00edch sv\u00fdch pravomoc\u00ed (oblast pou\u017eit\u00ed kryptografick\u00fdch prost\u0159edk\u016f ochrany informac\u00ed)<\/li>\n<\/ul>\n<p>Ka\u017ed\u00e1 organizace, kter\u00e1 zpracov\u00e1v\u00e1 osobn\u00ed \u00fadaje, se pot\u00fdk\u00e1 s probl\u00e9mem zaji\u0161t\u011bn\u00ed souladu sv\u00fdch informa\u010dn\u00edch syst\u00e9m\u016f s po\u017eadavky legislativy. Ochrana osobn\u00edch \u00fadaj\u016f je jednou z nejaktu\u00e1ln\u011bj\u0161\u00edch ot\u00e1zek, a to nejen v Rusku, ale tak\u00e9 v jin\u00fdch zem\u00edch.\u00a0<\/p>\n<p><img decoding=\"async\" alt=\"Ochrann\u00e1 cloudov\u00e1 platforma DF Cloud&nbsp;\" src=\"\/wp-content\/uploads\/2019\/11\/d912d3139ec8d75629d894a329298cc1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>Druhy osobn\u00edch \u00fadaj\u016f<\/h2>\n<p>\nPodle z\u00e1kona \u010d. 152-FZ jsou osobn\u00ed \u00fadaje jak\u00e9koli informace t\u00fdkaj\u00edc\u00ed se ur\u010dit\u00e9 nebo ur\u010diteln\u00e9 na z\u00e1klad\u011b t\u011bchto informac\u00ed fyzick\u00e9 osoby (subjektu osobn\u00edch \u00fadaj\u016f). Nap\u0159\u00edklad: jm\u00e9no a p\u0159\u00edjmen\u00ed, datum a m\u00edsto narozen\u00ed, adresa, rodinn\u00fd, soci\u00e1ln\u00ed, majetkov\u00fd stav, vzd\u011bl\u00e1n\u00ed atd. <\/p>\n<p>Osobn\u00ed \u00fadaje se d\u011bl\u00ed do n\u011bkolika kategori\u00ed:<\/p>\n<h3>Speci\u00e1ln\u00ed<\/h3>\n<p>Osobn\u00ed \u00fadaje t\u00fdkaj\u00edc\u00ed se rasov\u00e9ho, n\u00e1rodnostn\u00edho p\u016fvodu, politick\u00fdch n\u00e1zor\u016f, n\u00e1bo\u017eensk\u00fdch nebo filosofick\u00fdch p\u0159esv\u011bd\u010den\u00ed, zdravotn\u00edho stavu, intimn\u00edho \u017eivota<\/p>\n<h3>Biometrick\u00e9<\/h3>\n<p>Osobn\u00ed \u00fadaje, kter\u00e9 charakterizuj\u00ed fyziologick\u00e9 a biologick\u00e9 rysy \u010dlov\u011bka, na z\u00e1klad\u011b kter\u00fdch lze ur\u010dit jeho identitu a kter\u00e9 operator pou\u017e\u00edv\u00e1 k ur\u010den\u00ed identity subjektu osobn\u00edch \u00fadaj\u016f<\/p>\n<h3>Ostatn\u00ed<\/h3>\n<p>Osobn\u00ed \u00fadaje, kter\u00e9 se vztahuj\u00ed k p\u0159\u00edmo nebo nep\u0159\u00edmo ur\u010dit\u00e9 nebo ur\u010diteln\u00e9 fyzick\u00e9 osob\u011b, a kter\u00e9 nepat\u0159\u00ed do v\u00fd\u0161e uveden\u00fdch kategori\u00ed<\/p>\n<h3>Ve\u0159ejn\u011b dostupn\u00e9<\/h3>\n<p>Osobn\u00ed \u00fadaje z\u00edskan\u00e9 z ve\u0159ejn\u011b dostupn\u00fdch zdroj\u016f, v nich\u017e byly \u00fadaje zve\u0159ejn\u011bny s p\u00edsemn\u00fdm souhlasem subjektu osobn\u00edch \u00fadaj\u016f<\/p>\n<p>Zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f je jak\u00e1koli akce (operace) nebo souhrn akc\u00ed s osobn\u00edmi \u00fadaji s vyu\u017eit\u00edm automatizovan\u00fdch prost\u0159edk\u016f nebo bez nich, v\u010detn\u011b:<\/p>\n<ul>\n<li>sb\u011bru,<\/li>\n<li>z\u00e1znamu,<\/li>\n<li>syst\u00e9mov\u00e1n\u00ed,<\/li>\n<li>shroma\u017e\u010fov\u00e1n\u00ed,<\/li>\n<li>uchov\u00e1v\u00e1n\u00ed,<\/li>\n<li>up\u0159esn\u011bn\u00ed (aktualizace, zm\u011bna),<\/li>\n<li>vyu\u017eit\u00ed,<\/li>\n<li>p\u0159ed\u00e1v\u00e1n\u00ed (roz\u0161i\u0159ov\u00e1n\u00ed, poskytov\u00e1n\u00ed, p\u0159\u00edstup),<\/li>\n<li>anonimizace,<\/li>\n<li>blokov\u00e1n\u00ed,<\/li>\n<li>odstran\u011bn\u00ed,<\/li>\n<li>zni\u010den\u00ed osobn\u00edch \u00fadaj\u016f.<\/li>\n<li>Odpov\u011bdnost za poru\u0161en\u00ed<\/li>\n<\/ul>\n<p><\/p>\n<h2>Podle \u010dl\u00e1nku 24 z\u00e1kona \u010d. 152-FZ nesou osoby odpov\u011bdnost za poru\u0161en\u00ed z\u00e1kona v souladu s legislativou Rusk\u00e9 federace.<\/h2>\n<p>\nP\u0159i kontrole spole\u010dnosti se regul\u00e1to\u0159i \u0159\u00edd\u00ed z\u00e1konem \u010d. 152-FZ a \u0159adou podz\u00e1konn\u00fdch akt\u016f. Kontrola m\u016f\u017ee b\u00fdt pl\u00e1novan\u00e1 i nepl\u00e1novan\u00e1 \u2014 na z\u00e1klad\u011b zji\u0161t\u011bn\u00ed poru\u0161en\u00ed, jako\u017e i pro kontrolu d\u0159\u00edve vydan\u00e9ho p\u0159\u00edkazu k jejich odstran\u011bn\u00ed.<\/p>\n<p>P\u0159i kontrole spole\u010dnosti se regul\u00e1to\u0159i \u0159\u00edd\u00ed z\u00e1konem \u010d. 152 a \u0159adou podz\u00e1konn\u00fdch p\u0159edpis\u016f. Kontrola m\u016f\u017ee b\u00fdt jak pl\u00e1novan\u00e1, tak nepl\u00e1novan\u00e1 \u2014 na z\u00e1klad\u011b zji\u0161t\u011bn\u00ed poru\u0161en\u00ed, stejn\u011b jako pro kontrolu d\u0159\u00edve vydan\u00e9ho p\u0159edpisu o jejich odstran\u011bn\u00ed. <\/p>\n<p>Osob\u00e1m, kter\u00e9 poru\u0161uj\u00ed po\u017eadavky na ochranu osobn\u00edch \u00fadaj\u016f, m\u016f\u017ee hrozit nejen ob\u010danskopr\u00e1vn\u00ed a disciplin\u00e1rn\u00ed odpov\u011bdnost, ale tak\u00e9 spr\u00e1vn\u00ed a dokonce i trestn\u00ed odpov\u011bdnost. <br \/>\n\u00a0<\/p>\n<h2>Jak splnit po\u017eadavky z\u00e1kona \u010d. 152?<\/h2>\n<p>\nTedy, spole\u010dnost nebo organizace, kter\u00e1 zpracov\u00e1v\u00e1 osobn\u00ed \u00fadaje nebo jin\u00e9 informace s omezen\u00fdm p\u0159\u00edstupem, mus\u00ed tyto informace chr\u00e1nit v souladu s legislativou. To vy\u017eaduje nejen v\u00e1\u017enou odbornost, znalosti a zku\u0161enosti, ale tak\u00e9 p\u0159in\u00e1\u0161\u00ed technick\u00e9 komplikace a zna\u010dn\u00e9 n\u00e1klady.<\/p>\n<p>Podle ofici\u00e1ln\u00edho vymezen\u00ed schv\u00e1len\u00e9ho FSTEK je \u201e... Bezpe\u010dnost osobn\u00edch \u00fadaj\u016f stav ochrany osobn\u00edch \u00fadaj\u016f, charakterizovan\u00fd schopnost\u00ed u\u017eivatel\u016f, technick\u00fdch prost\u0159edk\u016f a informa\u010dn\u00edch technologi\u00ed zajistit d\u016fv\u011brnost, integritu a dostupnost osobn\u00edch \u00fadaj\u016f p\u0159i jejich zpracov\u00e1n\u00ed v informa\u010dn\u00edch syst\u00e9mech osobn\u00edch \u00fadaj\u016f\u2026\"<\/p>\n<p><img decoding=\"async\" alt=\"Ochrann\u00e1 cloudov\u00e1 platforma DF Cloud&nbsp;\" src=\"\/wp-content\/uploads\/2019\/11\/6f6b88fd05aa545efd20d6547c89adfe.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nChcete-li splnit organiza\u010dn\u00ed, pr\u00e1vn\u00ed a technick\u00e9 po\u017eadavky z\u00e1kona \u010d. 152, je nutn\u00e9 nejen prostudovat samotn\u00fd z\u00e1kon, ale tak\u00e9 jeho prov\u00e1d\u011bc\u00ed p\u0159edpisy a zjistit, jak\u00e9 konkr\u00e9tn\u00ed opat\u0159en\u00ed je t\u0159eba p\u0159ijmout. Odborn\u00edci na outsourcingu mohou prostudovat procesy zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f ve spole\u010dnosti, sestavit pot\u0159ebn\u00e9 dokumenty, implementovat ochrann\u00e9 prost\u0159edky atd.<\/p>\n<p>Komplexn\u00ed syst\u00e9m ochrany informac\u00ed zahrnuje: <\/p>\n<ul>\n<li>Prost\u0159edky prevence vniknut\u00ed (IDS). <\/li>\n<li>Firewall (FW).<\/li>\n<li>Ochranu p\u0159ed \u0161kodliv\u00fdm softwarem.<\/li>\n<li>Syst\u00e9m monitorov\u00e1n\u00ed a registrace bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed.<\/li>\n<li>Syst\u00e9m kryptografick\u00e9 ochrany komunika\u010dn\u00edch kan\u00e1l\u016f (\u0161ifrov\u00e1n\u00ed).<\/li>\n<li>Prost\u0159edky ochrany virtu\u00e1ln\u00edho prost\u0159ed\u00ed, syst\u00e9m ochrany p\u0159ed neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem (NSA), identifikace a \u0159\u00edzen\u00ed p\u0159\u00edstupu.<\/li>\n<li>Syst\u00e9m anal\u00fdzy zabezpe\u010den\u00ed\/odhalov\u00e1n\u00ed zranitelnost\u00ed a dal\u0161\u00ed. <\/li>\n<\/ul>\n<p>\nKrom\u011b toho komplexn\u00ed informa\u010dn\u00ed bezpe\u010dnost zahrnuje nejen technick\u00e1, ale i organiza\u010dn\u00ed opat\u0159en\u00ed. <\/p>\n<h2>Cloud z\u00e1kona \u010d. 152: zvl\u00e1\u0161tnosti implementace<\/h2>\n<p>\n\u0158ada rusk\u00fdch poskytovatel\u016f nab\u00edz\u00ed slu\u017eby poskytov\u00e1n\u00ed cloudov\u00e9 infrastruktury pro um\u00edst\u011bn\u00ed informa\u010dn\u00edch syst\u00e9m\u016f v souladu s po\u017eadavky feder\u00e1ln\u00ed legislativy t\u00fdkaj\u00edc\u00edmi se ochrany osobn\u00edch \u00fadaj\u016f. P\u0159i um\u00edst\u011bn\u00ed syst\u00e9m\u016f klienta v cloudu poskytovatel p\u0159eb\u00edr\u00e1 \u0159e\u0161en\u00ed mnoha ot\u00e1zek v oblasti informa\u010dn\u00ed bezpe\u010dnosti, v\u010detn\u011b ot\u00e1zky ochrany osobn\u00edch \u00fadaj\u016f. P\u0159i migraci do cloudu zajist\u00ed ochranu IT infrastruktury, \u010d\u00edm\u017e odpadnou n\u011bkter\u00e9 povinnosti klienta. Nap\u0159\u00edklad poskytovatel spl\u0148uje po\u017eadavky z\u00e1kona \u010d. 152-FZ, kter\u00e9 se t\u00fdkaj\u00ed ochrany prost\u0159ed\u00ed virtualizace.<\/p>\n<p>Poskytovatel\u00e9 mohou tak\u00e9 poskytovat z\u00e1kazn\u00edk\u016fm odbornou podporu p\u0159i \u0159e\u0161en\u00ed ot\u00e1zky ochrany dat: ur\u010dovat po\u017eadovanou \u00farove\u0148 ochrany a na z\u00e1klad\u011b toho navrhovat varianty realizace; vypracov\u00e1vat dokumentaci pro spln\u011bn\u00ed po\u017eadavk\u016f rusk\u00e9ho z\u00e1konod\u00e1rstv\u00ed.<\/p>\n<p>Zabezpe\u010den\u00fd cloud pom\u016f\u017ee optimalizovat n\u00e1klady organizace, \u010d\u00edm\u017e sn\u00ed\u017e\u00ed v\u00fddaje na vytv\u00e1\u0159en\u00ed a \u00fadr\u017ebu IT infrastruktury a vnit\u0159n\u00edho syst\u00e9mu ochrany informac\u00ed. Obvykle kvalifikovan\u00ed odborn\u00edci zaji\u0161\u0165uj\u00ed komplexn\u00ed technickou podporu a asistenci, v\u010detn\u011b poradenstv\u00ed a vypracov\u00e1n\u00ed souboru dokument\u016f pro certifikaci u regula\u010dn\u00edch org\u00e1n\u016f, a platforma pro poskytov\u00e1n\u00ed slu\u017eeb spl\u0148uje p\u0159\u00edsn\u00e9 technick\u00e9 standardy a uspokojuje nezbytn\u00e9 organiza\u010dn\u00ed po\u017eadavky. Klienti mohou vyu\u017e\u00edt slu\u017eby p\u0159\u00edpravy pot\u0159ebn\u00e9 dokumentace a ochrany ISPDn na \u00farovni aplikac\u00ed a opera\u010dn\u00edho syst\u00e9mu. <\/p>\n<p>Jsou tak\u00e9 stanoveny procesy \u0159\u00edzen\u00ed rizik a zranitelnost\u00ed, vy\u0161et\u0159ov\u00e1n\u00ed incident\u016f, vnit\u0159n\u00ed a vn\u011bj\u0161\u00ed bezpe\u010dnostn\u00ed audity, stejn\u011b jako pravideln\u00fd monitoring a testov\u00e1n\u00ed s\u00edt\u011b, syst\u00e9m\u016f a proces\u016f informa\u010dn\u00ed bezpe\u010dnosti. Kvalifikovan\u00ed specialist\u00e9 zaji\u0161\u0165uj\u00ed celodenn\u00ed podporu IT infrastruktury.<\/p>\n<p>Tyto opat\u0159en\u00ed dohromady zaji\u0161\u0165uj\u00ed dodr\u017eov\u00e1n\u00ed feder\u00e1ln\u00ed legislativy t\u00fdkaj\u00edc\u00ed se ochrany osobn\u00edch \u00fadaj\u016f. <\/p>\n<h2>Certifikovan\u00e1 platforma<\/h2>\n<p>\nIBS DataFort poskytuje tuto slu\u017ebu na z\u00e1klad\u011b <noindex><a rel=\"nofollow\" href=\"https:\/\/www.datafort.ru\/services\/informatsionnaya-bezopasnost\/sootvetstvie-trebovaniyam\/oblako-152-fz.html\">certifikovan\u00e9 platformy DF Cloud<\/a><\/noindex>. Cel\u00e1 technick\u00e1 \u010d\u00e1st, administrace a prost\u0159edky virtualizace t\u00e9to platformy odpov\u00eddaj\u00ed norm\u00e1m a po\u017eadavk\u016fm z\u00e1kona \u010d. 152-FZ.<br \/>\n<img decoding=\"async\" alt=\"Ochrann\u00e1 cloudov\u00e1 platforma DF Cloud&nbsp;\" src=\"\/wp-content\/uploads\/2019\/11\/678e6b3122a7944ae8fbffe749fbe2a9.jpg\" style=\"display:block;margin: 0 auto;\" \/><i>Architektura zabezpe\u010den\u00e9ho cloudu IBS DataFort.<\/i><\/p>\n<p>Platforma zaji\u0161\u0165uje garantovanou ochranu osobn\u00edch \u00fadaj\u016f (do 1. \u00farovn\u011b zahrnut\u00fd), GIS (do 1. t\u0159\u00eddy ochrany zahrnut\u00fd) a bezpe\u010dn\u00e9 ukl\u00e1d\u00e1n\u00ed dat v datov\u00e9m centru Tier III. Na platform\u011b jsou implementov\u00e1ny certifikovan\u00e9 firewall syst\u00e9my, prost\u0159edky detekce a prevence pr\u016fnik\u016f (IDS\/IPS), \u0161ifrov\u00e1n\u00ed komunika\u010dn\u00edch kan\u00e1l\u016f (GOST VPN), antivirov\u00e1 ochrana, prost\u0159edky ochrany p\u0159ed neopr\u00e1vn\u011bn\u00fdm p\u0159\u00edstupem, ochrana virtualiza\u010dn\u00edho prost\u0159ed\u00ed, stejn\u011b jako prost\u0159edky skenov\u00e1n\u00ed zranitelnost\u00ed.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/www.datafort.ru\/services\/informatsionnaya-bezopasnost\/sootvetstvie-trebovaniyam\/oblako-152-fz.html\">Cloud FZ-152<\/a><\/noindex> \u2014 tak\u00e9 vhodn\u00e9 \u0159e\u0161en\u00ed pro ty, kte\u0159\u00ed maj\u00ed vysok\u00e9 po\u017eadavky na d\u016fv\u011brnost a ochranu dat, cht\u011bj\u00ed pos\u00edlit svou obchodn\u00ed reputaci nebo z\u00edskat konkuren\u010dn\u00ed v\u00fdhodu v podob\u011b prok\u00e1zan\u00e9 vysok\u00e9 \u00farovn\u011b informa\u010dn\u00ed bezpe\u010dnosti. <\/p>\n<p>Jak se \"p\u0159esunout\" do takov\u00e9ho cloudu? Je mo\u017en\u00e1 \"bezprobl\u00e9mov\u00e1 migrace\"? Rozhodn\u011b. Nap\u0159\u00edklad IBS DataFort prov\u00e1d\u00ed bezpe\u010dn\u00fd p\u0159enos osobn\u00edch \u00fadaj\u016f do sv\u00e9ho chr\u00e1n\u011bn\u00e9ho cloudu a minimalizuje prostoje a dopad na obchodn\u00ed procesy spole\u010dnosti (v\u010detn\u011b ze zahrani\u010dn\u00edch lokalit).<\/p>\n<h2>Uveden\u00ed IT infrastruktury do souladu s FZ-152<\/h2>\n<p>\nProces uveden\u00ed IT infrastruktury klienta do souladu s po\u017eadavky FZ-152 za\u010d\u00edn\u00e1 auditem a hodnocen\u00edm aktu\u00e1ln\u00ed \u00farovn\u011b ochrany. <\/p>\n<p>Audit IT infrastruktury klienta zahrnuje prozkoum\u00e1n\u00ed proces\u016f zpracov\u00e1n\u00ed a ochrany osobn\u00edch \u00fadaj\u016f a zkoum\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f objednatele. Vytv\u00e1\u0159\u00ed se zpr\u00e1va o prozkoum\u00e1n\u00ed s podrobn\u00fdm popisem proces\u016f zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f z technick\u00e9ho pohledu. <\/p>\n<p>Pr\u00e1ce zahrnuj\u00ed tak\u00e9 modelov\u00e1n\u00ed hrozeb a naru\u0161itel\u016f a vypracov\u00e1n\u00ed akt\u016f ur\u010den\u00ed \u00farovn\u011b ochrany pro osobn\u00ed \u00fadaje. Na z\u00e1klad\u011b v\u00fdsledk\u016f auditu se sestavuje d\u00edl\u010d\u00ed technick\u00e1 specifikace na syst\u00e9m ochrany osobn\u00edch \u00fadaj\u016f a definuj\u00edc\u00ed po\u017eadavky na navrhovan\u00fd syst\u00e9m. <\/p>\n<p>Vyv\u00edj\u00ed se soubor politik, pokyn\u016f, p\u0159edpis\u016f a dal\u0161\u00edch dokument\u016f na ochranu osobn\u00edch \u00fadaj\u016f. P\u0159itom se specialist\u00e9 sna\u017e\u00ed optimalizovat n\u00e1klady klienta na zav\u00e1d\u011bn\u00ed ochrann\u00fdch prost\u0159edk\u016f.<\/p>\n<p>IBS DataFort poskytuje slu\u017eby p\u0159\u00edpravy dokumentace a ochrany osobn\u00edch \u00fadaj\u016f pro dodr\u017een\u00ed feder\u00e1ln\u00ed legislativy o ochran\u011b osobn\u00edch \u00fadaj\u016f a m\u016f\u017ee pomoci p\u0159i p\u0159\u00edprav\u011b a absolvov\u00e1n\u00ed certifikace (osobn\u00ed \u00fadaje, GIS, AS).<\/p>\n<p>Ov\u011b\u0159ov\u00e1n\u00ed prov\u00e1d\u011bj\u00ed nez\u00e1visl\u00ed audito\u0159i s licencemi FSTEK a FSB Rusk\u00e9 federace. \u00dasp\u011b\u0161n\u00e9 absolvov\u00e1n\u00ed takov\u00e9ho ov\u011b\u0159en\u00ed potvrzuje spolehlivou ochranu osobn\u00edch \u00fadaj\u016f partner\u016f a klient\u016f spole\u010dnosti p\u0159ed vn\u011bj\u0161\u00edmi hrozbami a komplexn\u00ed dodr\u017eov\u00e1n\u00ed po\u017eadavk\u016f regul\u00e1tor\u016f. Je d\u016fle\u017eit\u00e9, \u017ee klienti z\u00edsk\u00e1vaj\u00ed pohodl\u00ed \u201ejednoho okna\u201c: v\u0161e zaji\u0161\u0165uje jedna spole\u010dnost \u2014 IBS DataFort.<\/p>\n<p>Pro oper\u00e1tora osobn\u00edch \u00fadaj\u016f to znamen\u00e1 p\u0159ipravenost na kontroly Roskomnadzoru, FSTEK a FSB, vylou\u010den\u00ed rizik blokace zdroj\u016f, absence st\u00ed\u017enost\u00ed a sankc\u00ed regul\u00e1tora.<\/p>\n<p>Tato slu\u017eba je aktu\u00e1ln\u00ed pro mnoho kategori\u00ed z\u00e1kazn\u00edk\u016f v st\u00e1tn\u00edm a korpor\u00e1tn\u00edm sektoru a m\u016f\u017ee b\u00fdt popt\u00e1v\u00e1na oper\u00e1tory osobn\u00edch \u00fadaj\u016f, kte\u0159\u00ed cht\u011bj\u00ed uv\u00e9st svoji \u010dinnost do souladu se z\u00e1konod\u00e1rstv\u00edm. Um\u00edst\u011bn\u00ed IS v uzav\u0159en\u00e9m segmentu infrastruktury poskytovatele, kter\u00fd byl certifikov\u00e1n podle v\u0161ech pot\u0159ebn\u00fdch standard\u016f a po\u017eadavk\u016f, zbavuje z\u00e1kazn\u00edka pot\u0159ebnosti samostatn\u011b organizovat v\u0161echny pr\u00e1ce.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/datafort\/blog\/473774\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0424\u0417-152 \u00ab\u041e \u0437\u0430\u0449\u0438\u0442\u0435 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u0432: \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043b\u0438\u0446, \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0432\u043b\u0430\u0441\u0442\u0438 \u0438 \u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u044d\u0442\u043e\u0442 \u0437\u0430\u043a\u043e\u043d \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u043b\u044e\u0431\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0433\u0440\u0430\u0436\u0434\u0430\u043d \u0420\u0424, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0444\u043e\u0440\u043c\u044b \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041f\u043e\u0440\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0434\u043b\u044f \u0441\u0435\u0431\u044f \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u044f\u0432\u043d\u044b\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52543","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0424\u0417-152 \u00ab\u041e \u0437\u0430\u0449\u0438\u0442\u0435 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u0432: \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043b\u0438\u0446, \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0432\u043b\u0430\u0441\u0442\u0438 \u0438 \u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zashhishhyonnoe-oblako-na-platforme-df-cloud\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0417\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0435 \u043e\u0431\u043b\u0430\u043a\u043e \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 DF Cloud | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0424\u0417-152 \u00ab\u041e \u0437\u0430\u0449\u0438\u0442\u0435 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u0432: \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043b\u0438\u0446, \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0432\u043b\u0430\u0441\u0442\u0438 \u0438 \u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zashhishhyonnoe-oblako-na-platforme-df-cloud\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-10T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:18+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zabezpe\u010den\u00e9 cloudov\u00e9 \u0159e\u0161en\u00ed na platform\u011b DF Cloud | ProHoster","description":"Z\u00e1kon \u010d. 152 \u201eO ochran\u011b osobn\u00edch \u00fadaj\u016f\u201c se vztahuje na v\u0161echny existuj\u00edc\u00ed subjekty: fyzick\u00e9 a pr\u00e1vnick\u00e9 osoby, feder\u00e1ln\u00ed org\u00e1ny st\u00e1tn\u00ed moci a m\u00edstn\u00ed samospr\u00e1vy.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zashhishhyonnoe-oblako-na-platforme-df-cloud","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0435 \u043e\u0431\u043b\u0430\u043a\u043e \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 DF Cloud | ProHoster","og:description":"\u0424\u0417-152 \u00ab\u041e \u0437\u0430\u0449\u0438\u0442\u0435 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00bb \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u043e\u0432: \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043b\u0438\u0446, \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0432\u043b\u0430\u0441\u0442\u0438 \u0438 \u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zashhishhyonnoe-oblako-na-platforme-df-cloud","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-10T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52543","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 03:57:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:41:24","updated":"2026-01-24 03:57:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52543","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=52543"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/52543\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=52543"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=52543"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=52543"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}